News for hackers. Stuff that matters.

A comment on Facebook rewarded a 10-year-old for finding Instagram security flaw. Parent comment

Re:Facebook rewarded a 10-year-old for finding Instagram sec... by tptacek on Tuesday May 03, 2016 @06:20PM (#11624715)
No, it would be worth much less than $10,000 to anyone else.

There is a specific kind of bug that is worth 6 figures on the black market: clientside remote code execution. Somehow, HN has gotten the impression that the going rate for the hardest bugs in the world to reliably weaponize is actually the going rate for all bugs everywhere.

[ Parent | on HN ]
Re:Facebook rewarded a 10-year-old for finding Instagram sec... by mwcampbell on Tuesday May 03, 2016 @08:26PM (#11625321)
So you're saying client-side remote code execution bugs are the hardest to reliably weaponize? Do I understand correctly? I figured those bugs would be the easiest to weaponize.
[ Parent | on HN ]
Re:Facebook rewarded a 10-year-old for finding Instagram sec... by tptacek on Tuesday May 03, 2016 @09:09PM (#11625482)
We mean different things, and it's me being imprecise. Substitute "generate" for "weaponize".
[ Parent | on HN ]