How the commercialization of bug bounties is creating more vulnerabilities

This week on The Vergecast interview series, Verge editor-in-chief Nilay Patel talks to founder and CEO of Luta Security Katie Moussouris.

Moussouris has a long history in computer security, working at Microsoft and the Department of Defense creating their first bug bounty programs to incentivize catching and reporting security bugs and vulnerabilities in software systems.

Nilay and Katie discuss the history of bug bounty programs, from the early iterations to the current state of affairs, from good to bad. Though Moussouris says the concept of hiring hackers to help make organizations more secure has numerous positives, the commercialization of the practice has created blindspots and other unintended incentives.

Below is a lightly...

Continue reading…