Why Reporting Security Bugs Can Be Fraught With Tension
This 2021 video interview from BankInfoSecurity examines the tensions researchers face when reporting vulnerabilities to organizations without disclosure policies. Casey Ellis, founder, CTO and chairman of Bugcrowd, says legal protections are needed for responsible researchers, who function as the internet's immune system, and he is involved with Disclose.io, a safe harbor initiative.
Source description, as published
Reporting security vulnerabilities to organizations with no disclosure policies can be fraught with tension. In the worst conflicts, security researchers could face
Inventors / authors: Jeremy Kirk