News for hackers. Stuff that matters.

A comment on Remote Code Execution in Slack desktop apps. Parent comment

Re:Remote Code Execution in Slack desktop apps by jcims on Saturday August 29, 2020 @12:37PM (#24317306)
> The bug value also shows how much Slack here values their security, and makes me wary of them if I was in the place to be a customer of theirs.

Most directly it shows how they value a bug bounty program. There are companies that spend hundreds of millions of dollars per year and have thousands of people in their infosec program that don’t have bug bounty programs.

You can extrapolate that to how they value security but that’s not necessarily directly correlated.

[ Parent | on HN ]
Re:Remote Code Execution in Slack desktop apps by albntomat0 on Saturday August 29, 2020 @01:07PM (#24317580)
>There are companies that spend hundreds of millions of dollars per year and have thousands of people in their infosec program that don’t have bug bounty programs.

Such as?

[ Parent | on HN ]
Re:Remote Code Execution in Slack desktop apps by jcims on Saturday August 29, 2020 @06:48PM (#24319961)
Large banks in the US.
[ Parent | on HN ]