logoalt Hacker News

erutoday at 12:01 AM2 repliesview on HN

> In the past I would have thought this would incentivize finding bugs that might never be found.

Isn't that a good thing?

> However it is now clear that all bugs that can be found will be found. So this makes a ton of sense.

If Google can find all the bugs nowadays, presumably with AI, why still pay a bug bounty? At least by this logic, bug bounties make less sense now.


Replies

jsw97today at 12:05 AM

Sure they make sense — you need some incentive to drive the price to zero.

DANmodetoday at 2:58 AM

Because there’s still a sizable group of people who see $1,000 from Google as more than $1,000.

Even a resume item.