Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bug bounty terms can dissuade reporters #5

Closed
ahouseholder opened this issue Oct 7, 2020 · 1 comment
Closed

Bug bounty terms can dissuade reporters #5

ahouseholder opened this issue Oct 7, 2020 · 1 comment
Labels
duplicate This issue or pull request already exists

Comments

@ahouseholder
Copy link
Collaborator

Received from someone involved in CERT/CC's CVD service:

We're seeing reporters decline to report through bounty/VDPs that have terms the reporters don't like. 3-4 specific occurrences with us directly / recently. I quoted part of the guide to affected vendors but suggest a stronger "control is an illusion, focus on how badly you want the reports to come in" and related "bounty/VDP terms might dissuade reporting."
@ahouseholder
Copy link
Collaborator Author

duplicate of #4

@ahouseholder ahouseholder added the duplicate This issue or pull request already exists label Oct 7, 2020
ahouseholder added a commit that referenced this issue Apr 10, 2024
@ahouseholder
Merge pull request #5 from CERTCC/ahouseholder-patch-1
b4c6a89 
Update issue templates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
duplicate This issue or pull request already exists
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ahouseholder