Capital One is among a relatively small group of major companies that are encouraging the typically anti-establishment hacker community – and security researchers too – to find potential vulnerabilities in their computer networks before malicious hackers do. — AFP
When Ali Tutuncu found a vulnerability in Capital One Financial Corp’s software in March, the company fixed the flaw in 20 days. An independent security researcher, Tutuncu said the bank thanked him and added him to its page of fame.
“They did not pay financially,” he said. “Still, it was a nice experience.”
