| ▲ | eru 5 hours ago | |
> In the past I would have thought this would incentivize finding bugs that might never be found. Isn't that a good thing? > However it is now clear that all bugs that can be found will be found. So this makes a ton of sense. If Google can find all the bugs nowadays, presumably with AI, why still pay a bug bounty? At least by this logic, bug bounties make less sense now. | ||
| ▲ | jsw97 5 hours ago | parent | next [-] | |
Sure they make sense — you need some incentive to drive the price to zero. | ||
| ▲ | DANmode 2 hours ago | parent | prev [-] | |
Because there’s still a sizable group of people who see $1,000 from Google as more than $1,000. Even a resume item. | ||