Call for Submissions to UK’s New Computer Misuse Act

A major bug bounty platform supplier has urged the security local community to add its views to a new UK government consultation on laptop misuse rules, or risk its voice not staying heard.

With just a fortnight still left for submissions to the evaluation of the Laptop or computer Misuse Act 1990, Bugcrowd is concerned that moral hackers may possibly be remaining out in the cold when an current legislation is unveiled.

Though the Home Business office has proposed that a statutory legal protection for benevolent hacking would “advance our entire of society approach to cybersecurity,” it is also mindful of the likely for unintended effects, the business claimed.

Examine more on ethical hacking: US Government Will Welcome Ethical Hackers.

“Poor lawful security for ethical hackers could have the chilling result whereby those who could lead to creating the internet a safer put develop into fearful to do so,” argued Bugcrowd founder, Casey Ellis.

“In Bugcrowd’s watch, the UK needs to feel along the very same strains as the US, which has clarified defense for legitimate security investigation functions by using an significant Supreme Court docket ruling and a distinct DOJ commitment not to prosecute good-religion security researchers.”

Though two industry teams – the Cybersecurity Policy Working Group (CPWG) and the Hacker Policy Coalition – will reflect the earlier mentioned sights in submissions to the evaluate, additional responses may possibly be necessary from men and women and corporations.

“Amid the rapid acceleration of technology and the huge, ongoing, worldwide lack of proficient cybersecurity professionals, Bugcrowd needs companies and law enforcement to continue to be equipped to advantage from ‘Neighbourhood Enjoy for the internet’ by encouraging any person from the moral hacking community to assist,” Ellis ongoing.

“Those moral, properly-indicating and dependable researchers ought to not be set in a posture where by they may possibly be at risk of authorized jeopardy.”

The consultation closes on April 6 2023, and submissions can be created in this article.

The information arrives as the most recent Pwn2Very own contest wrapped up in Vancouver, with contributors discovering 27 zero-day vulnerabilities in excess of the 3-working day interval in merchandise as diverse as Adobe Reader, Microsoft SharePoint and application running on a Tesla Model 3.

These discoveries will support participating vendors make their products extra safe, while earning the winning groups of moral hackers above $1m in prizes together with their possess Tesla to drive absent.

Some areas of this short article are sourced from:
www.infosecurity-journal.com