3 ms·
Until companies accurately value their distributed bug bounties and have a better track record of paying, then the parallel market of the true market price of s
by yieldcrv 3y ago
Until companies accurately value their distributed bug bounties and have a better track record of paying, then the parallel market of the true market price of security will flourish
The market price of how worth it is this stuff to the company
For now, the flogging continues until morale improves
- artursapek 3y ago(profit_from_crime * risk_of_crime) has to < profit_from_whitehat
- yieldcrv 3y agocorrect, and the blackhat infrastructure is far more sophisticated to distribute liability, corporation like. the person creating a payload is compensated without doing the unauthorized access the person doing the unauthorized access is compensated without selling the things they found the person selling the things they found didn’t do the unauthorized access, and is not trying to weaponize the information (lets use an example of identity theft here and below) the person weaponizing the information is only guilty of using someone else’s credentials or making new credit cards in comparison, white hat is undervalued when respected, a gamble for being respected enough for compensation at all, and comes with threats of prosecution anyway