3 ms·
For this kind of specialism, I'd expect a company to pay an internal employee that much ($5000) per week of work - and contractors should be charging double. T
by throwaway2245 6y ago
For this kind of specialism, I'd expect a company to pay an internal employee that much ($5000) per week of work - and contractors should be charging double.
The fact that a company has undervalued this work and failed to identify it as important, and someone external has identified it, makes it worth even more.
A ransom demand on YouTube might be unbounded in value, e.g.: https://www.lexology.com/library/detail.aspx?g=e4d1be15-18db-49d1-9e8f-a25cabe7dfcf https://www.lexology.com/library/detail.aspx?g=e4d1be15-18db...
- wscott 6y agoExactly. If you have the skill set to find exploits like described here or even more complicated ones, would that payout tempt you do this fulltime? If you live in the US then I would say no. It ends up being much lower pay than you could get in other areas. For brilliant hackers in other parts of the world, then this might be a nice job. But I don't know if these bug bounties are available everywhere.