3 ms·
I had the same thought. Seems like the value of such an exploit could be a lot more than $5k to the right people in the open market. The macro effect is that
by jaytaylor 10y ago
I had the same thought. Seems like the value of such an exploit could be a lot more than $5k to the right people in the open market.
The macro effect is that when someone with lower moral/ethical standards discovers such an exploit it's more likely the find will end up being sold for more money and ultimately used maliciously in the wild.
The more $fb pays the greater the incentive will be for shady people to responsibly report it to $fb.
Relying on good samaritans doesn't seem like a sustainable or particularly responsible solution to taking care of those trusting the Facebook platform to not leak their private information.
- icebraining 10y agoSeems like the value of such an exploit could be a lot more than $5k to the right people in the open market. Probably not. What would the buyer do with it? It's probably very hard to mass scrape FB (rate limiting would kick in), and there are other ways of getting a specific email address.
- jaytaylor 10y agoIt's about more than just email addresses. This is the policy applied to all exploits for their entire platform.
- icebraining 10y agoHow so? They paid a $15k bounty earlier this year.
- jaytaylor 10y agoPerhaps it's my mistake then, apologies. I didn't know it was a variable rate!