4 ms·
1. Companies are amoral entities, and given the opportunity have few qualms about screwing people over if they can profit from it. Why do you expect people to b
by depressedpanda 2y ago
1. Companies are amoral entities, and given the opportunity have few qualms about screwing people over if they can profit from it. Why do you expect people to behave ethically towards entities that most likely won't treat them ethically?
2. If said person doesn't present the bug to the company, but just goes straight to selling it to the highest bidder it's not extortion. If the company does not provide the right incentives (via e.g. bug bounties), isn't it their own fault if they get pwnd? They clearly don't value security.
- unclebucknasty 2y agoYou seem to be saying it's essentially "justified extortion" and not immoral because you've adjudicated them guilty. We disagree. Not to mention them getting "pwnd" creates a lot of collateral damage in the form of innocent customers.