3 ms·
Do hackers seek to make a living off bounties? It seems as if they just want a good, rewarding, motivating experience. To be treated with respect and to get the
by eprime 10y ago
Do hackers seek to make a living off bounties? It seems as if they just want a good, rewarding, motivating experience. To be treated with respect and to get the recognition they want. $50 for a vulnerability appears very low for this. Looking in the hackerone site, some companies publish how much they give to the hackers and most have a much more generous minimum reward.
- fratlas 10y agoAnecdotal, but I've heard friends of friends who earn 6 figure salaries worth of bounties for corporations, although some sound more like consultation type gigs.
- mathgeek 10y agoPart of the equation is that companies offering bounties need to compete with entities who also offer rewards for said knowledge.
- mordechai9000 10y agoI'd hope that some people, at least, actually want to fix problems and gain respect in their field. As opposed to engaging in criminal activity and selling out to the highest bidder.
- santoshalper 10y agoPeople who want to gain professional respect are probably going to stay away from a pornhub bounty - I am not anti-porn, but I wouldn't put it on my resume either. Also, regardless of good intentions at the start, once the company has screwed you over. I am sure it is tempting to return the favor with the next vulnerability you find.
- mabbo 10y agoIt's easy to say "I do it for the respect, not the money" when you have enough money to get by. There's plenty of guys out there who are searching for hacks like this because they need to feed their kids. I won't criticize them for selling bugs to nefarious entities. Bug bounties aren't for guys like us who don't need the money.
- mathgeek 10y ago> I'd hope that some people, at least, actually want to fix problems and gain respect in their field. Naturally. Of course you must assume that some people don't.
- cyphar 10y agoI have friends that made their living off bug bounties for a few years. Eventually they get jobs at security firms, but sometimes you can't get a job without having some proof of experience.