4 ms·
Generally companies prefer if you find bugs and disclose them before malicious parties find and exploit them. Most websites have a “responsible disclosure” pol
by KMnO4 6y ago
Generally companies prefer if you find bugs and disclose them before malicious parties find and exploit them.
Most websites have a “responsible disclosure” policy. If you can’t find this linked on their main page, you can often find it at /security.txt or /.well-known/security.txt
[0]: https://securitytxt.org/ https://securitytxt.org/
[1]: https://facebook.com/security.txt https://facebook.com/security.txt
- czbond 6y agoI'd suggest "most" is liberal. A few is more likely.... most corporates take it as an offense (someone may be fired, only the most enlightened of CISO's in progressive orgs treat it as anything but heresy). In SilVal - sure, a higher number because they can get it. Everyone else treats these types of issues as "guilty before proven innocent"