3 ms·
> Does it fix the issues? Yes. > Do I think there are other security issues here and we can bypass this? Also, yes. > Do I want to spend more time doing free
by 8organicbits 5y ago
> Does it fix the issues? Yes.
> Do I think there are other security issues here and we can bypass this? Also, yes.
> Do I want to spend more time doing free work for a company with a 2.5 TRILLION market cap? Hell, no.
Troubling.
- SamuelAdams 5y agoNot really all that troubling, all the author is saying is that he wants to get paid for their work. Either Microsoft or other future vendors can actually honor an established bug bounty program, or the author can sell his findings to the highest bidder. Or the author can simply not spend time and energy finding bugs in the first place.
- oaiey 5y agoHighest bidder is unethical and illegal. But does not change the monetary reality
- artful-hacker 5y agoHow is it illegal?
- rajin444 5y agoPass a law that requires companies to pay black market value for bug bounties. It’s also unethical for big corporations to exploit the US oligarchy to get these fixes for free.
- shukantpal 5y agoThere’s no exploitation going on.
- 8organicbits 5y agoDon't miss the middle statement; the author thinks there are further attacks here, even with the fix. Others can also find and then choose to report/sell at their own discretion.