When responsible disclosure becomes unpaid labor

Responsible vulnerability disclosure is increasingly failing due to slow responses, bureaucratic processes, and lack of compensation for security researchers. This creates an incentive gap where researchers face months-long waits, severity disputes, and unpaid labor when reporting flaws. The breakdown pushes some toward public Show more