Dossier
independent security researcher
Coverage of independent security researcher in the Nexus archive.
- Microsoft under fire for threatening security researcher with criminal investigation
Microsoft is involved in a public dispute with an independent security researcher over a threatened criminal investigation. The conflict highlights ongoing debates about responsibility for securing software.
- Warning: Deribit silently patches critical security flaws and ghosts the researchers. Can we trust an exchange that hides its vulnerabilities?
An independent security researcher reported critical vulnerabilities to Deribit via its bug bounty program, but the exchange silently patched the flaws and ignored the researcher for over 70 days without communication or payment. The researcher raised concerns about Deribit's lack of transparency and trustworthiness, as the exchange is listed as an 'unmanaged' program on HackerOne, preventing forced resolution.