4 ms·
What if I introduce security bugs only to be paid bounty on them later
by darepublic 6y ago
What if I introduce security bugs only to be paid bounty on them later
- saagarjha 6y agoI believe that most platforms have restrictions barring you from submitting bug reports if you're affiliated with the company offering them.
- cortesoft 6y agoThe platform doesn't really care, it is the company with the bugs that pays out. It is probably the client companies that have those policies.
- hnick 6y agoEasy loophole, work with a friend.
- lawnchair_larry 6y agoAnd risk losing your 100s of k a year career for a $250 Amazon gift card. Knock yourself out.
- cortesoft 6y agoAre you asking what would happen if you defraud the company you work for?
- imtringued 6y agoIt would be more sensible to just report existing bugs via the platform instead of reporting them to the project manager.
- gitgud 6y agoYou would be an unethical hacker I suppose
- mhh__ 6y agoWhat if you put anthrax in a birthday cake? It's still illegal. Besides, planting a bug and solving it would still involve faking version control records to insert the bug. You might be able to get away with it once but the bean counters wouldn't let you fool them twice in that regard. Unless you had a guy on the inside etc. but it's turtles all the way down.
- kleiba 6y agoI can only hope you're not self-employed.