Kevin Finisterre
American vulnerability researcher best known for walking away from a $30,000 bug bounty in 2017 rather than sign DJI's non-disclosure terms.
In January 2007 Finisterre co-ran the "Month of Apple Bugs", which dropped a new macOS vulnerability every day for a month to puncture the idea that the Mac was immune. He has since spent much of his time on embedded systems, vehicles and drones.
In 2017 he found, among other things, private TLS keys and AWS credentials that DJI had left public on GitHub, exposing customer data. The company offered a bounty but wanted an agreement that could have been turned against him legally. He declined and published his account — a useful reminder that a bounty programme is only worth its terms.