Navigating an Uncharted Future, Bug Bounty Hunters Seek Safe Harbors

guest · Jul 3, 2018

Navigating an Uncharted Future, Bug Bounty Hunters Seek Safe Harbors
More companies are looking to adopt “safe harbor” language in their bug bounty programs to build trust with participants.
July 2, 2018
https://threatpost.com/navigating-an-uncharted-future-bug-bounty-hunters-seek-safe-harbors/133202/

When researcher Kevin Finisterre found a security error in drone-maker DJI’s systems enabling him to access flight log data and images of customers, he thought he had hit the $30,000 jackpot as part of the drone company’s newly announced bug bounty program.

Instead, when the incident occurred in 2017, he was met with thinly-veiled threats from the company. The incident shows that bug bounty programs still have ways to go when it comes to legal “safe harbor” terms – conditions clearly outlining how researchers, who are acting in good faith, can report bugs without facing legal repercussions.
The Rise of Safe Harbor Language
To combat these types of bug bounty issues, companies can try to be as clear as possible in their bug bounty paperwork to ensure hackers have a clear understanding of the legal terms and conditions for hacking their systems.

At this point, most companies still lack legal safe-harbor language in their contracts that allow hackers to compete among themselves to find security vulnerabilities.
Click to expand...

Log in or Sign up

Navigating an Uncharted Future, Bug Bounty Hunters Seek Safe Harbors

guest Guest

Log in or Sign up

Navigating an Uncharted Future, Bug Bounty Hunters Seek Safe Harbors

guest Guest

Useful Searches