Researcher banned on Valve's bug bounty program publishes second Steam 0-day

Re:Researcher banned on Valve's bug bounty program publishes... by tptacek on Thursday August 22, 2019 @12:12AM (#20764560)

People can publish whatever they want, and the only thing H1 can do about it is disinvite them from their platform. But anyone who suggests that H1 encourage people to publish NA/WONTFIX bugs probably hasn't had much contact with H1 bounty reports.

In reality, valid bugs being quashed by vendors is not the real problem H1 has.

[ Parent | on HN ]

Re:Researcher banned on Valve's bug bounty program publishes... by shkkmo on Thursday August 22, 2019 @12:22AM (#20764618)

I would rather suggest that H1 discourage (or even prohibit) their partners from dis-inviting reporters for publicizing NA/WONTFIX bugs.

In this particular case, is sounds like H1 (or an employee thereof) actively discouraged disclosure, which seems like a problem.

> In reality, valid bugs being quashed by vendors is not the real problem H1 has.

There can clearly be more than one problem. I still fail to see the relevance of the "bug report quality" problem to this discussion (beyond explaining why automatic disclosure of NA/WONTFIX reports is not helpful.)

[ Parent | on HN ]