4 ms·
Right, hence crowdsourcing.
by abalashov 17y ago
Right, hence crowdsourcing.
- tptacek 17y agoI guess my point is: if you find a security hole in this service, why would you give it up for $10,000?
- shader 17y agoSell it to as many customers as you can find first, and then go to them for the extra $10,000. You get more money than you would have otherwise, and you also save innocent people from being unduly compromised. It's a win-win situation ;)
- tptacek 17y agoKinda makes me hope that the person who does find this vulnerability just publishes: "I have found a critical vulnerability in this application, which I will demonstrate under NDA to any reporter who requires verification. I will under no circumstances reveal this vulnerability to the vendor or to any other party."