3 ms·
Agreed. This can be both bottom-up with more Responsible Disclosure programs, as well as top-down (i.e. via the legal system), making sure to take intent and a
by yakkomajuri 6y ago
Agreed.
This can be both bottom-up with more Responsible Disclosure programs, as well as top-down (i.e. via the legal system), making sure to take intent and actual harm caused into greater consideration when seeking to prosecute a white hat.
- yakkomajuri 6y agoBottom-up is perhaps the best approach, however. I mean, if an organization doesn't want white hats snooping around, then that's up to them, period. So should be a matter of more organizations actually putting out some guidelines. Top-down would be important for accidental discoveries though. It's quite problematic to go after someone that accidentally finds an issue in your service.
- mycall 6y agoTop-down is how governments work. Policy first, technology third.
- jlgaddis 6y agos/Responsible/Coordinated/g