Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Taking The Guesswork Out of Vulnerability Reporting

hackerone.com | vulnerability | #github | #vulnerability-disclosure | #policy | #hackerone | #opensource | #security-md

Summary

GitHub and HackerOne add SECURITY.md files and security advisories so researchers can responsibly disclose open source vulnerabilities, with HackerOne's Policy Builder generating a policy in minutes.
Published
Collected

original ↗

Related coverage

  1. Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules (hackerone.com)
  2. A framework for successful vulnerability disclosure policy (yeswehack.com)
  3. Incentive Policy for Coordinated Vulnerability Disclosure (yeswehack.com)
  4. Jingle Bugs - How to Rock in a Hard Place (hackerone.com)
  5. Introducing Reputation (hackerone.com)
  6. CVE-2023-54391 and beyond: excavating silent patches and the attacker-defender information gap (yeswehack.com)

back