60 ms·
It's definitely more harmful long term to arrest rather than reward. Arresting people for reporting security vulnerabilities only causes the people whom would d
by jhgg 13y ago
It's definitely more harmful long term to arrest rather than reward. Arresting people for reporting security vulnerabilities only causes the people whom would do so reluctant or even afraid of the repercussions. Meanwhile those who exploit maliciously will continue to not report their findings. If I was to find a security vulnerability in a site I frequent, I'd most likely stay quiet about it out of fear of legal ramifications.
- nobodyshere 13y agoAfter such a motivating action from the govt., they'll simply sell the vulnerabilities for some BTC to someone else.
- btcwatcher 13y agoPerhaps there's a need for a White Hat market, through which exploits can only be sold to the affected party. The market would list the existence of the vulnerability (but not the details) until it was fixed.