Bug Bounties

Experts advise? Take pack the power by forcing the gray hat researcher into a prisoner's dilemma.

The popular social news site and community forum platform has run a private program with HackerOne for the past three years, but hopes that by going public, it can more quickly address vulnerabilities, improve its defenses and keep the platform secure.

The push and pull between the military and security researchers is indicative of more widespread tensions that needs to be surmounted if the Pentagon wants to secure its contracting base.

Today’s columnist, Kathleen Trimble-Noble of Intel, offers insights into what makes for a good hardware-based bug bounty program. Intel ranked No. 4 in HackerOne’s 2020 list of Top 10 public bug bounty programs.