HackerOne Congratulates the Department of Defense on 11K Vulnerability Reports

This interview with Kris Johnson, Director of the DoD Vulnerability Disclosure Program, describes the DoD's adoption and evolution of hacker-powered security (Hack the Pentagon, VDP, bug bounties), the program's remediation and tracking improvements (VRMN), notable vulnerability findings (AMRDEC SAFE two-factor bypass; DFAS myPay authentication/plaintext password issues), lessons learned, and future VDP initiatives to expand scope and engagement with the researcher community.