-
Book Overview & Buying
-
Table Of Contents
The Vulnerability Researcher's Handbook
By :
Throughout this book, we’ve discussed stories about security researchers discovering and disclosing vulnerabilities. We’ve also talked about how these stories often follow a similar pattern: someone finds a security flaw, tells the company responsible for the affected software, and then (if all goes well) the company releases a patch to fix the problem. In other cases, there are complications. For example, the researcher and the company might disagree on whether the flaw is a problem. The company might not be responsive to the researcher’s disclosure. Or, as in some of the most famous cases, the company might try to silence the researcher through legal means.
It’s lovely when disclosures are received well, and everything gets patched up quickly and cleanly. However, conflicts between researchers and vendors are common even with expanded awareness and investment...
Change the font size
Change margin width
Change background colour