3 ms·
Well the market disagrees with security researchers. 5000 dollars is akin to to a very healthy contractor rate of $200 an hour at 25 hours of work, which is a
by dimitrios1 6y ago
Well the market disagrees with security researchers.
5000 dollars is akin to to a very healthy contractor rate of $200 an hour at 25 hours of work, which is a conservative estimate of how much time OP spent discovering this. That to me feels pretty fair pay, based on things in reality, not some future value of potential costs savings that require some pretty hand-wavy maths to quantify.
- robocat 6y agoHourly rates are not appropriate. * experts are paid for applying their knowledge, not their time[1][2] * A “fair” time based system should also pay for unsuccessful searches e.g. the previous month unsuccessfully searching for a bug in Chrome. * if person A spends 1 hour finding bug X, and person B spends 1000 hours finding exactly the same bug X, then it is a fallacy that you could pick a fair hourly rate. Also I’ll mention that you don’t get paid according to how much damage a bug can cause. 1: usually the damages occur to a third party (e.g. users of Microsoft Windows, not Microsoft). 2: imagine you find ten bugs that could wipe out the business Acme - you can’t get paid 10x Acme’s value (not even just 1x Acme’s profits.) [1] https://quoteinvestigator.com/2018/01/14/time-art/ https://quoteinvestigator.com/2018/01/14/time-art/ [2] https://www.snopes.com/fact-check/know-where-man/ https://www.snopes.com/fact-check/know-where-man/
- deleted 6y ago[deleted]