3 ms·
Make bug bounties pay $250k and people will have their friend inside add some bugs for the outsider to find, and share the payday. Pay-per-bug-found incentivi
by jodrellblank 5y ago
Make bug bounties pay $250k and people will have their friend inside add some bugs for the outsider to find, and share the payday.
Pay-per-bug-found incentivises plenty of counterproductive things as well, especially if we're talking about people who happily sell to anyone on the black market.
- darkarmani 5y agoYou can do that today with blackmarket exploits, so why do you think actual bug bounties will cause this problem?
- jodrellblank 5y agoBecause then you'll be able to do it without needing any black market connections or transactions, which will make it easier, more of it happens above board, there's less to trace or indicate any problem so it's less discoverable, the payment is from a trusted source. Why would making it easier make it happen less often?