logoalt Hacker News

Gander5739 • today at 5:38 PM • 3 replies • view on HN

> Bounties exist to make it nominally more economical for researchers to report exploits than it is to resell them.

Is this really true? After all, reselling the exploit would be illegal, and most people don't want to break the law to earn income.


Replies

jack_pp • today at 5:48 PM

most people who care about legality don't work in that field either. whoever gets into this probably starts by being ok with doing shady stuff, I imagine.

➕ show 2 replies
graemep • today at 5:51 PM

Most people do not, but it needs only some people who do so for it to be a problem. Most people do not steal, but I still lock my front door.

micromacrofoot • today at 5:50 PM

there are enough people operating in countries that would not charge them for hacking an American company for it to matter, $90k can be a life-changing sum