“People are already looking at these systems. The question is, do you want to create an avenue by which they can report it to you, or would you rather have them tweet it?” said Ilona Cohen, chief legal officer of HackerOne.