3 ms·

If there's no economic incentive to report bugs through normal, legal channels, won't the incentives drive vulnerability discoverers to sell them on the black m

If there's no economic incentive to report bugs through normal, legal channels, won't the incentives drive vulnerability discoverers to sell them on the black market, or to shady intelligence agencies? I agree, it's futile to ask/beg Hackers to not exploit a bug or vulnerability, so we should incentivize them to do it in a way that causes improvement.

uberman 5mo ago
Perhaps I voiced this incorrectly. My real point is that bug bounties are valuable and that an increased velocity of bug identification and resolution is a good thing and AI should not diminish that objective.