3 ms·
this is why again, researchers should just honestly sell these to vuln brokers instead of donating them to trillion dollar companies for nothing. nothing will
by r_lee 1mo ago
this is why again, researchers should just honestly sell these to vuln brokers instead of donating them to trillion dollar companies for nothing.
nothing will change until big tech can no longer rip off security researchers
- DANmode 1mo agoBut my “Google paid me” on my resume!
- nullbio 1mo agoThey're not going to stop underpaying security researchers just because security researchers decide to sell them to vuln brokers. Advocating for this is reckless.
- r_lee 1mo agothey will if it becomes common knowledge that nobody serious is participating in their bug bounty programs. besides, they have incredibly deep pockets and they can afford to pay 6 figures for bugs like these advocating for this is much more ethical than donating money to Google. I'd rather have that money go my family than a multi trillion dollar company.
- bethekidyouwant 1mo agoWho is to say they didn’t already do that?
- r_lee 1mo agoyou're not allowed to burn exploits like that if you've signed a deal, and who would risk that for $1k? of course it could be a colleague or someone with access to such tools
- deleted 1mo ago[deleted]
- bethekidyouwant 1mo ago“You are not allowed to do things” - lol
- r_lee 1mo agoI forgot HN doesn't believe in contracts. sorry. from what I remember, they also don't pay it all out at once but rather over time where the payments stop if the bug gets patched. I don't understand why you're being so cocky here? this is how many 0 click exploits are sourced