RenderMan & Tom Dang: The Risks of Telling the Truth About Vulnerabilities
A DEF CON 31 talk about the challenges of disclosing vulnerabilities in government systems. Despite calls to report security issues, researchers often face investigations, legal risks, and unclear reporting processes.
The speakers share personal experiences working with government agencies and explain how poorly designed disclosure policies can turn good-faith reporting into serious problems.
The talk also discusses what needs to change to make vulnerability disclosure safer for both researchers and organizations.
The speakers share personal experiences working with government agencies and explain how poorly designed disclosure policies can turn good-faith reporting into serious problems.
The talk also discusses what needs to change to make vulnerability disclosure safer for both researchers and organizations.