Damus
Soldier of FORTRAN :ReBoot:​ · 3w
I knew eventually companies would turn on bug bounty programs. We went long enough for the collective memory of management to forget the chaos of Full Disclosure and the absolute hell of playing patch...
Anton Piatek profile picture
@nprofile1q... yeah I've been wondering what legal case MS have here, it's not like any other reporting of faulty things (eg construction) is criminal, and at what point is disclosure actually just journalism and covered by journalistic privileges?
1
Soldier of FORTRAN :ReBoot:​ · 3w
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0vcz6v0w5le3mquu05p3wwxcp84gs7p9a6wcvrwrla0kqpygwtlskslf5x legal threats are free and sometimes work to stop the researcher. By 'working with law enforcement' they probably mean they had a call or an email with them where their contact told them...