Changes to Disclosure Assistance

HackerOne announced a revamp of its Disclosure Assistance program to reset expectations and realign with the hacker community; the notice clarifies the program is a best-faith effort with no guarantee of action, outlines the types of critical-impact reports they will attempt to contact impacted parties about (e.g., SQLi, RCE, bulk PII disclosure), and notes that mediation is not provided for Disclosure Assistance reports.