23965 shaares
62 results
tagged
bugreporting
Security.plist was inspired by the already-existing and highly popular security.txt standard.
The chip maker patched several problems in May. Now it is issuing another fix, and researchers say the company hasn’t been straight about its issues.
Adriel Desautels was suddenly in a serious mess, and it was entirely his fault.
This week on the podcast we’re talking about cybersecurity at schools—and how secure, or in some cases how vulnerable, the tech systems in school ...
A top developer of open-source media player VLC and critic of bug bounties shares lessons learned.
No one's better at hacking than the NSA. And now one if its powerful tools is available to everyone for free.
Google's Project Zero researchers find a potentially powerful privilege escalation trick in how Macs manage memory.
1Password, Dashlane, KeePass and LastPass each downplay what researchers say is a flaw in how the utilities manage memory.
Following a serious vulnerability disclosure to Atrient, the security researcher who disclosed the vulnerability was assaulted by their COO at ICE.
Posted by Chris Evans, Eric Grosse, Neel Mehta, Matt Moore, Tavis Ormandy, Julien Tinnes, Michal Zalewski; Google Security Team Vulnerabili...
Posted by Natalie Silvanovich, Project Zero At Project Zero, we spend a lot of time reporting security bugs to vendors. Most of the time, t...
New research from the Center for Democracy and Technology aims to help security researchers decide what level of risk is acceptable for them and their work.
Security researchers and reporters have something in common: both hold the powerful accountable. But doing so has painted a target on their backs — and looming threats of legal action and lawsuits have many concerned.
Where do they live? Why do they do it? HOW do they do it? HackerOne surveyed its registered ethical hackers to find out.
Over the course of this week, I've been writing about "Fixing Data Breaches" which focuses on actionable steps that can be taken to reduce the prevalence and the impact of these incidents. I started out by talking about the value of education; let's do a better job of
This week, I've been writing up my 5-part guide on "Fixing Data Breaches". On Monday I talked about the value of education; let's try and stop the breach from happening in the first place. Then yesterday it was all about reducing the impact of a breach, namely by
Popular drone maker DJI has bungled its bug bounty program — and a very public spat could have repercussions for the growing freelance industry.
A brief overview of how to write a useful tech support ticket, aimed at an audience of librarians of varying tech levels.
This is the first post in a series on software development practices. Weâre launching the series with a couple of posts aimed at helping those who might not have a technical background communicate their feature requests to developers.