3 ms·
More reasons https://twitter.com/k8em0/status/1078798252151992320 https://twitter.com/k8em0/status/1078798252151992320 Almost any amount of money allocated to b
by sp332 7y ago
More reasons https://twitter.com/k8em0/status/1078798252151992320 https://twitter.com/k8em0/status/1078798252151992320 Almost any amount of money allocated to bug bounties would be more efficiently spent developing in-house talent.
- Red_Leaves_Flyy 7y agoWhich serves the argument that instead of rewarding people for sharing vulnerabilities we should be punishing companies for having them. Harshly. The more data points a company tracks the faster the fine should approach 100% entire company market cap. Their subsidiaries, parent company's, board, and executives should also not be immune but rather personally liable for egregious cases of not knowing, failing to, or cutting corners around documented best practices, security patching, hardware rotation etc. The entire industry needs to be reworked to put security and make All pii hazardous. Sadly software is going the way of construction. Things Will only change when tptb get inordinately effected.