News for hackers. Stuff that matters.

A comment on LastPass release fix for DOM manipulation vulnerability. Parent comment

Re:LastPass release fix for DOM manipulation vulnerability by cmdrfred on Friday March 31, 2017 @11:54PM (#14010313)
If you want to control disclosure of a bug why not offer large sums of money in exchange for an NDA? "Report it to us, keep quiet for 30 days and we'll pay you 100k." Would be a motivator few would turn down.
[ Parent | on HN ]
Re:LastPass release fix for DOM manipulation vulnerability by catmanjan on Saturday April 01, 2017 @07:54AM (#14011691)
That's how those bug finders fees work, I'm not sure if introducing money into something ever makes it more ethical though
[ Parent | on HN ]