from Hacker News

Security Vulnerability Reporting Policy

by LukeHoersten on 11/17/17, 8:40 PM with 10 comments

• by tptacek on 11/17/17, 9:47 PM

  And? Lots of companies do; it's a best practice.

• by milkshakes on 11/17/17, 9:49 PM

  at least they posted the public key instead of the private one like adobe: https://arstechnica.com/information-technology/2017/09/in-sp...

• by fintler on 11/17/17, 9:34 PM

  > Priority will be granted to encrypted reports – please include your PGP public key with such reports.

  Is this a common thing? Why should they give priority to encrypted reports?

• by coenhyde on 11/17/17, 9:52 PM

  Also a bug bounty: https://bugcrowd.com/tesla