General Motors quietly flipped the switch on Detroit’s first public security vulnerability disclosure program. Under the program, third parties can reveal vulnerabilities they find with the guarantee that GM will work with them and not take legal action. GM’s effort isn’t a full-blown bug bounty program like the one announced by Tesla at last year’s Def Con conference in Las Vegas. I Am The Cavalry: “This first of a kind disclosure program, if copied by rest of the auto industry, will really catalyze the maturity of their security practices””]

