diodb VS awesome-safety-critical

Perhaps: https://disclose.io/programs/

Hi, I want to make some experience with web pentesting and I wanted to take some small bug bounty programs from disclose.io/programs/ . But to be honest I am scared that maybe I will do something wrong and I will face legal consequences 😱 . I am scared that by making the report they will see that I exploited the bug too much and put them in danger or something like that. I heard about white hat hackers reporting vulnerabilities and facing legal action but they discovered them without a bug bounty program like in this case https://www.bleepingcomputer.com/news/security/ethical-hacker-exposes-magyar-telekom-vulnerabilities-faces-8-years-in-jail/ What is your opinion about this ?

2) https://disclose.io

Helped develop coordinated vulnerability disclosure frameworks to allow security researchers to report security issues in good faith

I would also suggest contacting https://disclose.io/ and your National CSIRT team and ask for help. Good luck :)

Yeh, these are the different orgs that run programs on behalf of companies. For a list of the orgs running programs there’s about 2,300 of those here (also open-source and a contact work in progress): https://github.com/disclose/diodb

https://awesome-safety-critical.readthedocs.io/en/latest/#so...

awesome-safety-critical: https://awesome-safety-critical.readthedocs.io/en/latest/

FDA > Medical Devices > Cybersecurity:

awesome-safety-critical > Coding Guidelines: https://awesome-safety-critical.readthedocs.io/en/latest/

Rust SAST and DAST tools would be great for all, too.

From https://news.ycombinator.com/item?id=35565960 :

> Additional lists of static analysis, dynamic analysis, SAST, DAST, and other source code analysis tools: https://news.ycombinator.com/item?id=24511280 https://analysis-tools.dev/tools?languages=c++

https://awesome-safety-critical.readthedocs.io/en/latest/#co...

Predict; software quality, career success

By well-rounded do you mean the ACM Computer Science Curriculum; or a strong liberal arts program which emphasizes critical thinking and effective communication; or Emotional Intelligence, Servant Leadership, and Project Management?

InfoSec; Computer Security > Careers: https://en.wikipedia.org/wiki/Computer_security#Careers

The NIST NICE Framework describes Categories (7),

For a low level view, as how the code actually should look like, I found the JPL C coding guidelines very useful. It had an effect on me on how I wrote C after reading it.

Here's a github hosted version https://github.com/stanislaw/awesome-safety-critical/blob/ma...

https://news.ycombinator.com/item?id=28709239 :

> From "Ask HN: Is it worth it to learn C in 2020?" https://news.ycombinator.com/item?id=21878372 : (which discusses [bounded] memory management)

> There are a number of coding guidelines e.g. for safety-critical systems where bounded running time and resource consumption are essential. *These coding guidelines and standards are basically only available for C, C++, and Ada.*

> awesome-safety-critical > Software safety standards: https://awesome-safety-critical.readthedocs.io/en/latest/#so...

> awesome-safety-critical > Coding Guidelines: https://awesome-safety-critical.readthedocs.io/en/latest/#co...

Critical systems: https://en.wikipedia.org/wiki/Critical_system

> There are four types of critical systems: safety critical, mission critical, business critical and security critical.

Safety-critical systems > "Software engineering for safety-critical systems" https://en.wikipedia.org/wiki/Safety-critical_system#Softwar...

awesome-safety-critical lists very many resources for safety critical systems: https://awesome-safety-critical.readthedocs.io/en/latest/

There are many certification programs for software and other STEM fields. One test to qualify applicants does not qualify as a sufficient set of controls for safety critical systems that must be resilient, fault-tolerant, and redundant.

There are heuristics for memory-unsecure C: https://awesome-safety-critical.readthedocs.io/en/latest/