4 ms·
Bug bounties alone don't prove anything. https://www.schneier.com/blog/archives/2005/12/bug_bounties_ar.html https://www.schneier.com/blog/archives/2005/12/bug_
by literallycancer 6y ago
Bug bounties alone don't prove anything. https://www.schneier.com/blog/archives/2005/12/bug_bounties_ar.html https://www.schneier.com/blog/archives/2005/12/bug_bounties_...
- emptysongglass 6y agoDirectly from the first three sentences of your link: > Paying people rewards for finding security flaws is not the same as hiring your own analysts and testers. It’s a reasonable addition to a software security program, but no substitute. Sounds like a reasonable addition to me!
- literallycancer 6y agoWhere are the audits of MTProto2 then?