Re:Valve and HackerOne: how not to handle vulnerability reports
by pm_me_ur_fullz on Tuesday April 14, 2020 @01:29PM
(#22868796)
Responsible Disclosure does not mean waiting for arbitrary and unilateral decisions from a company just to be undervalued.
If your argument for responsible disclosure equally applies to this post, a $100 payout and to a $100,000 payout - as long as its from the company that needs to patch the exploit, then re-evaluate your argument.
If your argument for responsible disclosure equally applies to this post, a $100 payout and to a $100,000 payout - as long as its from the company that needs to patch the exploit, then re-evaluate your argument.