PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Morrison & Foerster’s David Newman: How Corporate Counsel Should Approach Hacker-Powered Security

hackerone.com | blog | #bug-bounty | #vulnerability-disclosure | #policy | #qa | #legal | #corporate
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Q&A with Morrison & Foerster's David Newman on the legal side of bug bounties: a valuable but carefully designed tool, and why companies must prepare even without a formal program.
Published
Collected

Related coverage

blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
vulnerability · yeswehack.com
Coordinated Vulnerability Disclosure policy for a safer cyberspace
Argues coordinated vulnerability disclosure needs clear legal guidelines to thrive, noting fragmented EU interpretations of hacking and outlining how policy can make researcher reporting safer.
blog · hackerone.com
A Partial Victory for AI Researchers
A recent DMCA Section 1201 ruling lowers legal risk for independent AI researchers who bypass technical protection measures, but falls short of the safeguards HackerOne sought for AI safety research.
blog · hackerone.com
Takeaways from the Dismissal of Most of the Government’s Case Against the SolarWinds CISO
A New York court dismissed most of the SEC's case against SolarWinds and its CISO, ruling the SEC lacks authority to regulate cyber resilience, while one disclosure claim proceeds to trial.
blog · hackerone.com
Using FOSSA for License Compliance
How to use FOSSA to audit open-source license compliance before fundraising or exit diligence: scan your dependencies and generate a report flagging incompatible licenses before they derail a deal.
blog · hackerone.com
Zomato’s First Anniversary with Bug Bounties: Q&A with Security Lead, Prateek Tiwari
Q&A with Zomato's security lead on the first year of its bug bounty program: $100,000+ paid to over 350 hackers since July 2017, driven by fast responses and community engagement.
Back