China's infosec researchers obeyed Beijing and stopped reporting vulns ... or did they?
The paper concludes that the RMSV has had a measurable impact, and that if similar laws were passed elsewhere it could lead to"potential isolation of significant subsets of the research community from the larger global supply of vulnerability disclosures."
"This kind of fear and fragmentation only adds risk to an already difficult to mitigate landscape," the paper adds."The United States and its allies should see the disclosure of Log4Shell as a call to action to improve the scale and resilience of the global supply of vulnerability disclosure," the paper declares.
The authors therefore recommend harmonizing vulnerability disclosure laws to allow cross-border sharing, international investment in open source vulnerability research tools, and tracking disclosure trends to spot gaps. Other suggestions include establishment of international processes that facilitate anonymous vulnerability reporting, and using national bug bounty programs to incentivize research on important software.
The report ends with the optimistic observation that infosec researchers generally behave ethically, as shown by Alibaba's discovery and reporting of Log4J"in spite of the RMSV and other legal contexts and with no apparent profit motive." "That kind of relationship, writ large across the security ecosystem, is one well worth preserving." ®
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Google Photos users report 'depressing' corruption issue on older imagesDo your old Google Photos look a little... strange?
Read more »
Government shift away from Boris Johnson's levelling up agenda an 'open goal' for LabourLiz Truss's focus on 'investment zones' is a 'massive risk' for the Conservatives, report warns
Read more »
Coroner orders council to mend road defects after cyclist’s deathCoroner orders council to mend road defects after cyclist’s death Assistant coroner’s Prevention of Future Deaths report says Jennifer Dyer’s death following pothole crash “was avoidable” cycling
Read more »
Alexander Isak now ruled out by Newcastle United for weeks due to lower leg injury - ReportNow reported that Alexander Isak has been ruled out by Newcastle United for weeks due to lower leg injury.
Read more »
Police appeal over sexual assault report in GrimsbyReports suggest a woman was followed and inappropriately touched in public
Read more »
Rugby Report: Derby delight for Lincoln and big wins for Kesteven and HykehamA round-up of the weekend's local rugby action Lincolnshire
Read more »