31 ms·
Aren't they worried that people will inject open-source vulnerabilities for free, then have Google to pay them when they are "found" and "fixed"?
by swamp40 13y ago
Aren't they worried that people will inject open-source vulnerabilities for free, then have Google to pay them when they are "found" and "fixed"?
- rictic 13y agoAccording to the page, fixing individual vulnerabilities won't typically be rewarded. This seems like it's for more systemic fixes, like improving privilege separation, security at the memory allocation level, etc.