4 ms·
It sounds like a great deal for Zoom... Zoom would have paid far more for this research in any other scenario. The InfoSec community seems to be quite happy gi
by jtdev 5y ago
It sounds like a great deal for Zoom... Zoom would have paid far more for this research in any other scenario.
The InfoSec community seems to be quite happy giving away their hard work, while the large security vendors make mountains of cash on snake oil solutions to enterprises. For context, Zoom certainly paid many multiples of $200k during any given month for firewall licensing.
- kristjansson 5y agoOTOH, security researchers do inflate the value of any given exploit (chain) vs. broad mitigations. Still, 200k seems _low_ for a bug that should imperil the reputation of a many-billion dollar company. And a few years ago it seems like that would have been $1000 and a firm handshake...