3 ms·
Responsible disclosure includes protecting the privacy of everyone involved. If the people who have been awarded bounties want the publicity, I'm sure they will
by phaus 14y ago
Responsible disclosure includes protecting the privacy of everyone involved. If the people who have been awarded bounties want the publicity, I'm sure they will let us know who they are.
- trotsky 14y agohttp://www.chromium.org/Home/chromium-security/hall-of-fame http://www.chromium.org/Home/chromium-security/hall-of-fame google == irresponsible ?
- kefs 14y agoname disclosure is optional, not mandatory.. http://www.chromium.org/Home/chromium-security/vulnerability-rewards-program#TOC-Can-you-keep-my-identity-confidential-from-the-rest-of-the-world- http://www.chromium.org/Home/chromium-security/vulnerability...
- phaus 14y agoAs already stated, Google's hall-of-fame is voluntary. If you conduct any sort of business transaction with someone (and that's exactly what this is) a good business would assume that the transaction is private unless other arrangements are made with the other party. It's common sense and common courtesy. If Mr. Dotcom asked first and then publicized the names, that's fine. If he made it a requirement of collecting the bounty, he's also within his rights. However, if he gave them the money and then disclosed their identities without asking them, it's would be an unprofessional thing to do. Not unforgivable, just unprofessional. Some people value privacy and anonymity. That's their prerogative.