2018-05-09 | Georgia’s Governor Deal vetoes SB 315, WSJ says the hot U.S. import is EU regulation, and Google’s 2017 CTF challenges are on GitHub

Wednesday, May 9

TOP STORY

• Georgia Governor Nathan Deal vetoed SB 315 to the surprise and delight of many in infosec. After careful review and consideration of this legislation, including feedback from other stakeholders, I have concluded more discussion is required before enacting this cyber security legislation. Read the full veto statement for more.

TWEET OF THE DAY

• This is 90% of infosec. - @brysonbort

OTHER ARTICLES WE’RE READING

• Unintended consequences: Axios’ Joe Uchill presents a case where ZTE sanctions might strengthen Chinese tech

• Jeremiah Grossman pens thoughts on misalignment between Application Security vulnerability assessment vendors and their customers in his latest blog, All these vulnerabilities rarely matter.

• The Wall Street Journal has a hot U.S. Import: European Regulations saying that GDPR is the latest sign of the EU’s growing power in global regulation.

• iOS 11.4 to Disable USB Port After 7 Days and Oleg Afonin looks at what this means for mobile forensics

• Google CTF 2017 challenges available on GitHub

ABOUT ZERO DAILY

Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.

Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?

Have a news tip / story to highlight? We’d love to hear about it. Email: zerodaily@hackerone.com

Get this email forwarded to you? Click here to subscribe to the Zero Daily

Consequently, while intending to protect against online breaches and hacks, SB 315 may inadvertently hinder the ability of government and private industries to do so… For the foregoing reasons, I VETO SB 315.

Georgia Governor Nathan Deal

 

---

HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited. As the contemporary alternative to traditional penetration testing, our bug bounty program solutions encompass vulnerability assessment, crowdsourced testing and responsible disclosure management. Discover more about our security testing solutions or Contact Us today.