logoalt Hacker News

kasey_junk • yesterday at 9:46 PM • 1 reply • view on HN

You think that most security researchers that can find an exploit are all willing to commit a heist with that exploit?

I’m not in the security industry but that strains credulity.


Replies

ofjcihen • yesterday at 9:53 PM

Where did I say that? Being capable of exploiting something and willing to are two different things.

The point is that bounties create an incentive to find and disclose vulns. That doesn’t require a black market for the exploits.

➕ show 1 reply