Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bug bounty terms can dissuade reporters from reporting vuls #4

Open
ahouseholder opened this issue Oct 7, 2020 · 0 comments
Open

Bug bounty terms can dissuade reporters from reporting vuls #4

ahouseholder opened this issue Oct 7, 2020 · 0 comments
Labels
enhancement New feature or request

Comments

@ahouseholder
Copy link
Collaborator

Received from someone involved in CERT/CC's CVD service:

We're seeing reporters decline to report through bounty/VDPs that have terms the reporters don't like. 3-4 specific occurrences with us directly / recently. I quoted part of the guide to affected vendors but suggest a stronger "control is an illusion, focus on how badly you want the reports to come in" and related "bounty/VDP terms might dissuade reporting."
@ahouseholder ahouseholder mentioned this issue Oct 7, 2020
Closed
@ahouseholder ahouseholder added the enhancement New feature or request label Oct 7, 2020
ahouseholder added a commit that referenced this issue Apr 10, 2024
@ahouseholder
Merge pull request #4 from CERTCC/dependabot/pip/mkdocs-8730912f6d
78a1116 
Bump the mkdocs group with 2 updates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ahouseholder