8 ms·

70,000 reasons to think long and hard about that appraoch though :-D

• lrvick 4y ago
  An alternative would be to go show a bunch of journalists that you can unlock their phone and have this all over the news. You get your name /really/ out there for holding Google accountable for security negligence and ignoring a very reasonable 90 day window. The exposure could lead to millions in security consulting contract work over time if played right. Disclosing on time is a way to force companies to fix the bugs, and to get a major social capital boost that can be used to get a return on the time investment. Personally I love when companies try to call my bluff. Great chance to educate the public on why they should not be trusted.
• sebzim4500 4y ago
  I suspect if he started the conversation with a 90 day disclosure window they would have offered him $100k immediately to extend the deadline. Of course, you'd have to consult a lawyer to make sure you don't technically cross the line into blackmail.