PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)

hackerone.com | research | #security-research | #vulnerability-disclosure | #policy | #hackerone | #uk | #legal | #cma
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne urged UK policymakers revising the Computer Misuse Act to affirm that VDP-based research is sanctioned and that defenses should not require certifications disadvantaging self-taught hackers.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
research · hackerone.com
A Safer Future for Security Research: Landmark Moves in Portugal and the UK
Portugal's new Article 7 safe harbor and the UK's proposed Computer Misuse Act defence mark major progress in protecting good-faith security research and coordinated vulnerability disclosure.
blog · bugcrowd.com
The UK’s Computer Misuse Act (1990) is up for revision. It’s time for ethical hackers to submit your views
The UK is consulting on revising the Computer Misuse Act (1990); Bugcrowd's Casey Ellis urges ethical hackers to submit views supporting a statutory defence for good-faith security research.
vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
research · portswigger.net
Responsible denial of service with web cache poisoning
James Kettle shows how web cache poisoning can take down websites with a single request without collateral damage, earning bounties from Tesla and HackerOne along the way.
research · bugcrowd.com
[Guest Post] Atlassian Adopts Bug Bounty Safe Harbor to Further Enable Researchers
Atlassian adopts a safe harbor clause in its Bugcrowd bounty rules, promising no legal action against good-faith researchers, after rewarding nearly 400 vulnerabilities worth $400,000 since 2017.
Back