Quando empresas punem quem encontra bugs

Já pensou ser banido por reportar uma falha? 😡

- Contexto: A Kim relembra os casos do Fábio Olive e do Alex — empresas brazucas esculachando quem achava bugs. 🗣️
- Exposição: Mostrado no Morning Crypto, especialistas em cibersegurança compartilham as sagas do ecossistema. 🔍
- Problema: Empresas de porte no Brasil prejudicando a própria segurança, bloqueando e banindo...

#bugbounty #cibersegurança #disclosure #segurança #pesquisadores #MorningCrypto

And here’s another bit from Michael Crichton’s ‘Disclosure’ (which he says is based on a true story), 1st published in 1994, but still feels contemporary in lots of areas; this is part of a longer speech:
“Third, I think that we have an obligation to— a social obligation, if you will— to keep high-paying skilled jobs in the U.S. Other countries don’t export good jobs. Why should we? Each of our offshore manufacturing decisions has been made for a specific reason, and, personally, I hope we start to move them back here. Because there are many hidden costs in offshore fabrication. … we need manufacturing. If there’s anything that the last twenty years has shown us, it’s that design and manufacturing are all one process. You start splitting off the design engineers from the manufacturing guys and you’ll end up with bad design. You’ll end up with General Motors.”

#reading #MichaelCrichton #Disclosure #quotes #manufacturing #design #SocialObligation #offshoring #reconnectingConsequencesToCauses

Michael Crichton’s ‘Disclosure’ (which he says is based on a true story), 1st published in 1994, but still feels contemporary in lots of areas. Enjoyed the complicated plot & the product-based manufacturing problem solving. And then there was this:
“As for Meredith, her behaviour didn’t surprise him at all. For years, Sanders had fought the B-school mentality that she exemplified. After watching these graduates come and go, Sanders had finally concluded that there was a fundamental flaw in their education. They had been trained to believe that they were equipped to manage anything. But there was no such thing as general managerial skills and tools. In the end, there were only specific problems, involving specific industries and specific workers. To apply general tools to specific problems was to fail. You needed to know the market, you needed to know the customers, you needed to know the limits of manufacturing and the limits of your own creative people. None of that was obvious.”

#reading #MichaelCrichton #problemSolving #Disclosure #BSchoolMentality #education #fundamentalFlaw #reconnectingConsequencesToCauses

1/n Notes on #UAP Discussions : We have to tread carefully, but for analysts and researchers who need to know where exactly the literal cutting edge of governance vs reality is regarding #UAP / #NHI this may be the most precise presentation of current status (with the tools) outside investigators have at their disposal. Simultaneously honest and on the right track

Via #SolFoundation with #PeterSkafish
Congresswomen Luna and Dr. Avi Loeb : Breaking #UAP #Disclosure News
https://youtu.be/c2rFSlorsSI?si=uHwAMN5ztpo_Ynab

GitHub Actions issued GitHub_TOKEN disclosure in GitHub Actions logs

https://github.com/composer/composer/security/advisories/GHSA-f9f8-rm49-7jv2

#HackerNews #GitHub #Actions #GitHub_TOKEN #security #disclosure #logs #GitHub #security