Time for a Change Why It's More Important Than Ever to Revisit the CFAA
summary
Argues that the CFAA is chilling good‑faith research and points to concrete data: a Go security.txt scanner finds only 933 of the top 100,000 sites expose a security.txt and only ~50 include a policy; the disclose.io list counts 973 programs with ~14.5% showing explicit authorization and ~21.5% partial safe‑harbor. Delivers tools and outcomes: open templates, a JSON directory and a public disclose.io seal, adoption rising but real cases (DJI letter, Van Buren litigation) show the problem persists.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 0:55Who is Casey
- 2:27What is Bugcrowd
- 4:25Agenda
- 5:28CFAA Backstory
- 7:05Bug Bounty
- 10:58What is CFAA
- 12:25Challenges with CFAA
- 13:38Changing the perception of hackers
- 14:23Open Source Vulnerability Disclosure Framework
- 16:10The Chilling Effect
- 16:59The DJI Bug Bounty
- 18:20Adoption
- 19:06DIOS
- 22:11VanBuren
- 23:44Votes
- 25:28Adoption of Vulnerability Disclosure
- 26:16The Internet Immune System
- 28:02Components
- 29:36Legal Terminology
- 32:46The List
- 33:55The Seal
- 38:33Viral
- 41:45Network Effect
- 42:05Vulnerability Disclosure
- 44:50Conclusion
related talks
27mHacker Rights
51mNo More Secrets in Cybersecurity: Implementing ‘Radical Transparency’
36mKeynote: We Deserve Rights
31mThe Product Security Imperative: Lessons from CISA
50mHacker Law After the Supreme Court Ruling: Insider Threats, Research & CFAA
25mEverything Old Is New Again: Legal Restrictions on...
50mThe Big Chill: Legal Landmines that Stifle Security Research and How to Disarm Them
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule