4 ms·
This case has implications across the board for CISOs that have to deal with incidents like this. I believe this case also dealt with a payout for a "bug bounty
by ianhawes 5y ago
This case has implications across the board for CISOs that have to deal with incidents like this. I believe this case also dealt with a payout for a "bug bounty".
- hluska 5y agoIt did. If you're interested, the congress hearing is here. That hearing is still the primary source for this story. It's worth some time - some journalists have tried to cover this but mostly just cherrypicked quotes. The entire hearing is better than any of the coverage. https://www.commerce.senate.gov/2018/2/data-security-and-bug-bounty-programs-lessons-learned-from-the-uber-breach-and-security-researchers https://www.commerce.senate.gov/2018/2/data-security-and-bug... You can watch the hearing on that page (it's more interesting to watch than to read) or find links to the various witnesses and their testimony. For example, if you want to read John Flynn's testimony, it is available here (.pdf): John Flynn - CISO @ Uber - https://www.commerce.senate.gov/services/files/7D70E53E-73E9-4336-A100-67B233084F12 https://www.commerce.senate.gov/services/files/7D70E53E-73E9... At this point, the only real lesson for CISO's seems to be 'report'.