SEARCH
Archive
Taking Hype Out of Bug Bounty Programs
“Bug bounty apostate” and Luta Security founder Katie Moussouris said bug bounty programs have veered away from their original mission: help organizations become more secure.
Open Source Software Needs Funding, Not Bug Bounty Programs
Bug bounty programs fill a need, but the European Union's offer to pay bug bounties for vulnerabilities in open source forgets one thing: projects don't need more flaws. Open source projects need people to fix the flaws.
Facebook Brings Bug Bounty to Developer Ecosystem
Facebook is expanding its bug bounty program to third-party apps and websites that might expose user tokens improperly.
Disclose.io Offers Security Researchers Safe Harbor
Disclose.io provides a clear legal framework to protect organizations and researchers engaged in vulnerability disclosure programs. The goal is to protect those engaged in good-faith security research from legal action.
Microsoft’s Bug Bounty Covers OpenID Flaws
Microsoft will do more than pay researchers bounties for finding and reporting vulnerabilities in Microsoft Account and Azure Active Directory in its Microsoft Identity Bounty Program. The company also wants vulnerabilities in select OpenID standards.