6 ms·
How would price discovery work to "correctly price bugs" What is a bugs correct price? The price that a bad actor would pay for it?
by cortesoft 6y ago
How would price discovery work to "correctly price bugs"
What is a bugs correct price? The price that a bad actor would pay for it?
- eyelidlessness 6y agoSome value between the cost of not fixing it and the value of exploiting it
- llarsson 6y agoWe have CVSS scores for grading vulnerabilities. So that could be useful as a start.
- saagarjha 6y agoCVSS is pretty useless for categorizing severity.