4 ms·

Considering these bug bounty programs are the most economical way to hire white hat talent, what took them so long? Why isn’t every company doing it? The only

by harikb 7y ago

Considering these bug bounty programs are the most economical way to hire white hat talent, what took them so long? Why isn’t every company doing it? The only reason I can think of is that they haven’t done a decent QA of their own system and afraid of resulting embarrassment.

harikb 7y ago
“ Apple says it will add a 50 percent bonus on top of the standard payout for bugs found in beta software, which allows the company to nix the issue before the OS version goes public. It is also offering the same bonus for so-called "regression bugs"” Quite interesting their treatment of beta. I would have thought reverse.
- krisoft 7y ago
  If you do it in reverse then you are incentivising people to hoard the bugs until release.
  - deleted 7y ago
    [deleted]
  - Chris_Chambers 7y ago
    If you have bug bounties at all then you are incentivizing employees to create subtle bugs on purpose to have their accomplices outside the company “discover” later.
  - deleted 7y ago
    [deleted]