4 ms·
Ideally it would be a privacy regulator who would issue a 7 figure fine and give the reporter a cut.
by lokar 5y ago
Ideally it would be a privacy regulator who would issue a 7 figure fine and give the reporter a cut.
- tptacek 5y agoIf you want to lobby for the law that enables that to happen, I'm happy to sign your petition, but I wouldn't get your hopes up.
- russelg 5y agoIt's called the GDPR. Places other than the US exist, and the bug reporter seems to be an EU resident.
- rndgermandude 5y agoThe GDPR indeed has provisions to fine companies for "avoidable" data leaks due to lacking security practices. The regulators will not pay you a bounty for reporting companies, and there is a big difference between a normal "bug" and "bad practices". E.g. one of the first GDPR fines here in Germany was issued against a company that had their customer DB dumped[0], specifically for still storing some user passwords in plaintext. [0] https://gdprhub.eu/index.php?title=LfDI_-_O_1018/115 https://gdprhub.eu/index.php?title=LfDI_-_O_1018/115