PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A Safer Future for Security Research: Landmark Moves in Portugal and the UK

hackerone.com | research | #bug-bounty | #vulnerability-research | #security-research | #vulnerability-disclosure | #policy | #uk | #safe-harbor | #legal | #portugal
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Portugal's new Article 7 safe harbor and the UK's proposed Computer Misuse Act defence mark major progress in protecting good-faith security research and coordinated vulnerability disclosure.
Published
Collected

Related coverage

research · hackerone.com
HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)
HackerOne urged UK policymakers revising the Computer Misuse Act to affirm that VDP-based research is sanctioned and that defenses should not require certifications disadvantaging self-taught hackers.
research · bugcrowd.com
[Guest Post] Atlassian Adopts Bug Bounty Safe Harbor to Further Enable Researchers
Atlassian adopts a safe harbor clause in its Bugcrowd bounty rules, promising no legal action against good-faith researchers, after rewarding nearly 400 vulnerabilities worth $400,000 since 2017.
research · bugcrowd.com
[GUEST POST] Standardizing Legal Safe Harbor for Security Research
Guest author Amit Elazari argues many bug bounty and VDP programs still lack legal safe harbor, calling for standardized language so researchers can test and disclose without legal exposure.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
Back