5 ms·

This may be true if there isn't a vulnerability disclosure program in place but there was, thus your point is completely invalid.

• hug 3y ago
  No, his point remains: companies may act in bad faith, and publicly committing to act in good faith is absolutely no evidence they will not. I don’t mean to be trite, but publishing a bug bounty program doesn’t mean you’re the good guys.
  • waihtis 3y ago
    > publishing a bug bounty program doesn’t mean you’re the good guys this is meaningless rabble. Yes you can get burned in all kinds of legitimate situations [1], but 99.xx% of bug bounty interactions do not result in any kind of legal action even if you wander a bit out of scope [1]: https://eu.desmoinesregister.com/story/news/crime-and-courts/2021/08/01/arrested-coalfire-security-testers-2019-file-dallas-county-iowa-courthouse-lawsuit/5431611001/ https://eu.desmoinesregister.com/story/news/crime-and-courts...
    • beeboobaa 3y ago
      > this is meaningless rabble That is rich coming from yourself. Are you at all familiar with German law?
    • bombcar 3y ago
      It’s less than a 1% chance of financial ruin!m? Sign me up!
      • waihtis 3y ago
        I hope you also avoid using any kind of modern transportation, like cars, since there's a non-zero chance of dying in a crash
        • bombcar 3y ago
          I would probably avoid transportation that kills 1% of its users each trip.
          • anon4242 3y ago
            Username checks out. Guess you're going for 100%?