Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Proposed: a Bounty for Bugs
Mark Rasch, 2003-11-10

Instead of paying hard cash to punish computer criminals, vendors should reward grey hat hackers for responsibly finding and reporting the security holes that make cyber attacks possible.

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Proposed: a Bounty for Bugs 2003-11-13
Anonymous
There are some points that need considering here:

- Opensource

When the next BIND/OpenSSH/etc bug is found, who is going to pay up? In effect you'll be making it more worthwhile to rip into Windows than concentrate on the broad spectrum of software

- Penalties for Vendors

If the vendor d...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus