5 ms·
I'm sorry, but this is naive. And your anecdote argues against the point you are making below it. Most people do have a price, even a "good" people. And good
by jonahx 13y ago
I'm sorry, but this is naive. And your anecdote argues against the point you are making below it. Most people do have a price, even a "good" people. And good people like OP are more likely to stay good when they feel it's appreciated. I think the price FB paid him is almost like a slap in the face, and could have the effect of antagonizing otherwise helpful people.
- tptacek 13y ago$4500 for a website auth bypass is not a slap in the face.
- jonahx 13y agoYes, it is. Knowing this exploit was worth many orders of magnitude more to facebook. You can't think of the money as an absolute amount and say, "hey, that sounds pretty good." It has a market value, both to fb and to blackhats, and that market value is far higher than $4500.
- tptacek 13y agoHave you sold a lot of vulnerabilities, then? Can I ask if you're speaking from experience here?
- qdpb 13y agoOne other thing to consider here is that these $4,500 are not packaged with a felony.
- deleted 13y ago[deleted]
- loumf 13y agoAlso, being listed on FB's responsible disclosure page isn't worthless.