Slashdot Mirror
The Army Bug Bounty Program: a Critical Need In Defense (cyberdefensereview.org)
hypercard writes: It seems just about every major tech company and even a few other large non-tech corporations have bug bounty programs as part of an effort to improve security through a community effort. Captains Rock Stevens and Michael Weigand, both Cyber officers in the U.S. Army, recently published Army Vulnerability Response Program, an outline for a legal way of disclosing bugs in Army software and networks. They say, "[T]he Army does not have a central location for responsibly disclosing vulnerabilities found through daily use, much less a program that can permit active security assessments of networks or software solutions. Without a legal means to disclose vulnerabilities in Army software or networks, vulnerabilities are going unreported and unresolved."
This idea seems to be well reasoned.
It has great potential to be both cost effective and practical...
It's obviously lacking Congressional Oversight.
You have the right to remain sentient. If you give up the right to remain sentient, you will be elected to public office