Harder and harder to get good policy like what you describe when tech-adjacent people loudly argue for criminal penalties for anything other than coordinated disclosure :(
Harder and harder to get good policy like what you describe when tech-adjacent people loudly argue for criminal penalties for anything other than coordinated disclosure :(
> criminal penalties
Mostly cover citizens within a very limited set of jurisdictions.
Otherwise there's a chance at extradition.