Conversation

Mårten Mickos
@martenmickos
The war in Ukraine is causing unbearable suffering for innocent humans. Additionally, sanctions are disrupting companies and individuals, including many who oppose the war. HackerOne condemns the war and complies with US and EU sanctions. Our values guide us in these questions 🧵
2
15
67
Mårten Mickos
@martenmickos
HackerOne’s principles in this matter: We condemn the war waged by Russia on Ukraine. We donate to relief efforts from company money. We are working to comply with all US & EU sanctions. We value the work of all ethical hackers & will pay bounties if & when sanctions allow.
1
1
11
Mårten Mickos
@martenmickos
We are currently withholding hacker reward payments to sanctioned regions (Russia, Belarus, etc.). When it becomes permissible again to pay out bounties, we will do so. We understand and sympathize with the difficult situation this creates for our hackers in these regions.
3
1
13
Mårten Mickos
@martenmickos
A few comments: It is an unfortunate fact of sanctions that they hit populations indiscriminately, without regard to whether the individual supports or is against their government’s action.
1
1
7
Mårten Mickos
@martenmickos
Sanctions are worded to cover broad areas of finance and business. They were not written with ethical hacking in mind. They also are updated often. Interpreting sanctions is complicated. We have internal and external experts working on it.
1
6
Mårten Mickos
@martenmickos
We are running hackers through additional screening based on the current sanction rules. My apologies for the delay and trouble this will cause.
1
1
6
Mårten Mickos
@martenmickos
A previous statement of ours was incorrect. We donate hackers’ rewards to charity only on their instruction. Additionally, we have donated to Unicef and continue to do so from our own funds.
2
1
11
Mårten Mickos
@martenmickos
HackerOne’s model is all about giving and taking feedback - specifically about software security or lack thereof. We apply that model more broadly, appreciating all input and every suggestion from our community. We are here to support you.
1
9
Mårten Mickos
@martenmickos
Warm thanks to all who are supporting the victims of the war, finding and reporting security vulnerabilities, and generally contributing to a functioning digital civilization.
4
16