3 ms·

False dichotomy.

• Apocryphon 8y ago
  It has precedence: https://www.helpnetsecurity.com/2018/11/07/virtualbox-guest-to-host-escape-0day/ https://www.helpnetsecurity.com/2018/11/07/virtualbox-guest-... > Zelenyuk has responsibly disclosed to Oracle (via the SecuriTeam Secure Disclosure program) another VirtualBox vulnerability over a year ago, but apparently Oracle took a very long time to fix it and ultimately failed to credit Zelenyuk for the discovery. --- https://news.ycombinator.com/item?id=16000550 https://news.ycombinator.com/item?id=16000550 archived: https://web.archive.org/web/20180202100849/https://medium.com/bread-and-circuses/how-i-got-paid-0-from-the-uber-security-bug-bounty-aa9646aa103f https://web.archive.org/web/20180202100849/https://medium.co... I Got Paid $0 from the Uber Security Bug Bounty --- https://techcrunch.com/2013/08/18/security-researcher-hacks-mark-zuckerbergs-wall-to-prove-his-exploit-works/ https://techcrunch.com/2013/08/18/security-researcher-hacks-... Security Researcher Hacks Mark Zuckerberg’s Wall To Prove His Exploit Works
  • jiveturkey 8y ago
    absolutely. but it isn't an either-or.