PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Proposed Changes to the Computer Fraud and Abuse Act, Austin Powers, and You

hackerone.com | vulnerability | #cloud | #vulnerability-disclosure | #hackerone | #cfaa | #advocacy | #law-policy
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Why proposed CFAA amendments alarm security researchers: expanded language could criminalize routine vulnerability research and testing — HackerOne urges cooperation over prosecution.
Published
Collected

Related coverage

research · hackerone.com
Legally Blind and Deaf - How Computer Crime Laws Silence Helpful Hackers
Computer crime laws like the CFAA and DMCA chill friendly security research, HackerOne argues, urging reform so hackers can report flaws without fear and companies welcome disclosure.
blog · hackerone.com
Report Smarter, Not Harder: HackerOne's Case for Better CIRCIA Rules
This coverage gives security teams current context for monitoring, validation, and remediation.
vulnerability · hackerone.com
Mr. Chairman, we need hackers!
Marten Mickos on HackerOne's Senate testimony and $25 million paid to its hacker community: a quarter of surveyed hackers donate bounty money to charity, and bounties now reach $250,000.
vulnerability · hackerone.com
An Attorney’s View of Vulnerability Disclosure
Attorney Matthew J. Gardner explains how vulnerability disclosure programs resolve CFAA ambiguity around white-hat hacking by establishing consent—plus what to weigh when crafting a VDP.
vulnerability · hackerone.com
The Voices of Vulnerability Disclosure: Look Who’s Talking About VDPs
A roundup of 16 quotes from governments, technologists and companies like GE and GM showing that vulnerability disclosure policies are becoming a baseline expectation for every company.
vulnerability · hackerone.com
Webinar Recap: Attorneys Chime in on Hacker-Powered Security
Webinar recap with Wiley Rein attorneys: CFAA penalties apply even to well-intentioned hackers, so disclosure programs and bounties increasingly define safe rules of engagement.
Back