vulnerability-disclosure
On the U.S. Government and bug bounties
My favorite thing about going to conferences is establishing the underlying trends behind the questions I’m asked. We’re only half-way through RSAC/BSides week, and already the dominant question is clear: When is the government going to start a bug bounty program? Here’s my answer: The government