5 ms·
> Find a vulnerability for the government, get prosecuted. In fairness the government is, of course, not a monolith. There are multiple federal bug bounty prog
by badRNG 5y ago
> Find a vulnerability for the government, get prosecuted.
In fairness the government is, of course, not a monolith. There are multiple federal bug bounty programs out there [0] [1]. This is probably better stated as "find a vulnerability in the systems of a deeply corrupt, gerrymandered, and unpopular state's government's sites and be prosecuted in that state."
[0] https://www.hackerone.com/hack-the-pentagon https://www.hackerone.com/hack-the-pentagon
[1] https://www.dhs.gov/news/2021/12/14/dhs-announces-hack-dhs-bug-bounty-program-identify-potential-cybersecurity https://www.dhs.gov/news/2021/12/14/dhs-announces-hack-dhs-b...
- derangedHorse 5y agoThe government is so fragmented and ineffective that even if I did find a pentagon vulnerability, I'd feel like some other department would prosecute me for it. One of the most unfair cases relating to security testing I've ever read about was that involving Coalfire Labs and the Iowa courthouse: https://www.cyberscoop.com/coalfire-security-pros-arrested-for-breaking-into-iowa-courthouse-are-still-bitter/ https://www.cyberscoop.com/coalfire-security-pros-arrested-f... Here's the darknet diaries episode where I first heard about it: https://darknetdiaries.com/transcript/59/ https://darknetdiaries.com/transcript/59/