What is the Dark Cloud Vulnerability Platform and what kind of website is Dark Cloud

The Dark Cloud Vulnerability Platform is a security feedback platform between vendors and security researchers, which provides a platform for Internet security researchers to provide public welfare, learning, communication and research while providing feedback and follow-up on security issues.

The original intention of the establishment of Wuyun.com is also committed to becoming an interactive platform for the technical development of Internet IT personnel, and has a certain influence in the industry.

A description of the recent system upgrade of the Dark Cloud system.

The recent frequent disclosure of security incidents and their impact shows that, on the one hand, the overall security construction of our enterprise is not perfect, but it is the same.

Feedback shows that there are some serious problems in our dark cloud platform and community, both in terms of communication channels and feedback and response mechanisms, and 2011 is coming.

By ending this way, we hope to start 2012 in a better way, so we'll be doing a short upgrade to the system too.

We would like you to give us advice on the following areas:

1. How to better interact with vendors and white hats on the platform, and the respective responsibilities and obligations that vendors and white hats should fulfill.

2 The current process for dealing with vulnerabilities and the mechanisms for disclosure, such as whether they should be gradually disclosed to the public to reduce the actual impact.

3 We are also always looking for graphic design and legal counsel, please feel free to contact us.

Computer technology exchange, a white hat communication platform.

It's not a loophole, it's a backdoor.

Vulnerabilities are unintentionally created, and it is a design oversight to crack them with unexpected results.

And these interfaces are explicit programming interfaces. In other words, it's a Trojan horse.

All of its functions are actively programmed and intentionally designed by the designer. It's not a loophole, it's a backdoor.

Although the disguised IP makes this backdoor accessible by the WAN, the impact of this backdoor is amplified. But even if it doesn't have this problem, even if it is bound, it is still a true backdoor for native applications. The local backdoor doesn't seem to make sense under the PC system, but the mobile system is subject to permission control, and other local applications can sell models to access things that they don't have permission to access through the backdoor, bypassing the system's permission verification system, and the impact is very bad.

I guess it's not the only one doing this. If other companies have a heart, they should converge and converge, and it won't look good if it is exposed, isn't it?

Cash rewards can be obtained based on vulnerability rating and scope of impact.

This thing will always be meaningful.

The key lies in what you want to do, and the advantage of others is in **.

No one in the world thinks and does the same thing.

Every excellent enterprise is constantly producing what has been done before, that is, it is reasonable.

Meaningful, you can quickly experience life behind bars

Yes, the dark clouds must file a vulnerability to get it quietly.

Now there are other ** that can also be submitted, such as Jianfeng Yunke, which is the opening of the payment of the Gongbi Chaguan manufacturer, and the money will definitely be more.

Hello, I am also doing the Internet, I admire you very much, and I hope to communicate and learn together.