3 ms·

How would that be "double dipping"?

• arkadiyt 9y ago
  Because they get full time salaries from Google for bug hunting.
  • ars 9y ago
    That's not really double dipping, that's more of a bonus.
    • SteveNuts 9y ago
      But it causes an enormous conflict of interest... Hey Bob can you make a bug, I'll report it, and we'll split the pot?
      • throwaway613834 9y ago
        Confused, which company would Bob be working for here? How would he make a bug?
        • lowpro 9y ago
          Also is there not always a conflict of interest with bug bounties anyway, as a friend of an employee could always 'find a bug' somewhere. I'm not sure I see the how being Project Zero or a normal user makes a difference.
      • tptacek 9y ago
        That supposed conflict exists with any bounty program no matter who the bounty hunter works for.
      • greglindahl 9y ago
        While it's important to design bug bounties carefully: http://dilbert.com/strip/1995-11-13 http://dilbert.com/strip/1995-11-13 This one doesn't appear to be poorly designed.
  • ENOTTY 9y ago
    I believe most of them donate the bug bounty money to some charity.