Hacker News new | ask | show | jobs
by 0x59 20 days ago
From what I can tell, the message is

When you discover an exploit, only communicate with source (and pray they respond) or get sued. Seems like the position is customers and stakeholders shouldn't be allowed access to this information.
2 comments
whstl 20 days ago
Seems similar to what Microsoft is doing lately:

https://www.cpomagazine.com/cyber-security/microsoft-doubles...

link
sigmoid10 20 days ago
That's actually very common even with respected bug bounty programs. Communicating exploits to anyone else (let alone the general public) will at the very least make you ineligible for rewards.
link
0x59 20 days ago
IMO if you're participating in a BB program, you should abide by he rules set forth by the program.

If you're not, then you don't have to.

link