3 ms·
Are bug bounty programs really all that much less work? My impression is that the offer of money tends to attract a ton of hard-to-decipher half-baked submissi
by IvyMike 13y ago
Are bug bounty programs really all that much less work? My impression is that the offer of money tends to attract a ton of hard-to-decipher half-baked submissions, and someone's got to dig through them all to separate the wheat from the chaff.
(I mean, I used to work on a product that was used exclusively by engineers, and some of the bug reports I got were nearly impossible to decipher. Open that to the general public, on a product used by bored teenagers who like to prank each other, and offer money on top of it, and it seems like hell on earth.)
- lewispollard 13y agoCounter-argument: The offer of money incentivises the reporter to be clearer and more thorough in their report because they want to get paid and not have their report thrown out by a moderator who can't understand it.