News for hackers. Stuff that matters.

A comment on cURL removes bug bounties. Parent comment

Re:cURL removes bug bounties by trashb on Wednesday January 21, 2026 @04:54AM (#46703344)
I see it a little differently. I would change your statement to the following:

It's not about securing your device from external threats or bad actors; it's about securing the organization from any blame / wrongdoing.

Most organizations today are looking high and low to shove the blame to others instead of taking responsibility.

[ Parent | on HN ]
Re:cURL removes bug bounties by TeMPOraL on Wednesday January 21, 2026 @05:26AM (#46703588)
It's related, but GP is still right to bring it up - it's the one question that is most important wrt. security, and also conveniently the least often asked: security for who, and from what? "Security" isn't an absolute good.
[ Parent | on HN ]