daniel:// stenberg://

3 months ago

daniel:// stenberg://
3 months ago

Happy #curl inspired Swisscom to add a "disclose your use of AI" to their bug-bounty program:

github.com/swisscom/bugbounty?…

Yes, hashtag#AI also affects hashtag#BugBounty. While we could leverage AI to optimize our internal triage processes, we haven't observed any noticeable, positive advances in vulnerability reports (yet). On the contrary, we are rather negatively impacted by opportunistic LLM-generated report submissions that burn our triage resources. Therefore, we followed Daniel Stenberg's example and introduced an AI policy in the Swisscom bug bounty program (link in the comments).

GitHub - swisscom/bugbounty: Swisscom Vulnerability Disclosure Policy & Bug Bounty Programme

Swisscom Vulnerability Disclosure Policy & Bug Bounty Programme - swisscom/bugbounty

^GitHub

#curl

This entry was edited (3 months ago)

in reply to daniel:// stenberg://

Stefan Eissing

in reply to daniel:// stenberg:// 3 months ago

nice!

in reply to daniel:// stenberg://

floyd aka floyd_ch

in reply to daniel:// stenberg:// 3 months ago

that was @ant0inet I suppose :)

@Baklava Monster

in reply to floyd aka floyd_ch

daniel:// stenberg://

in reply to floyd aka floyd_ch 3 months ago

@floyd @ant0inet it probably was! My screenshot is from LinkedIn but there are overlaps in the profiles there with the one you point to, to make me believe you are right!

@Baklava Monster @floyd aka floyd_ch

⇧

daniel:// stenberg://

daniel:// stenberg:// 3 months ago • •

GitHub - swisscom/bugbounty: Swisscom Vulnerability Disclosure Policy & Bug Bounty Programme

Stefan Eissing

floyd aka floyd_ch

daniel:// stenberg://

daniel:// stenberg://
3 months ago