News for hackers. Stuff that matters.

A comment on $100k donation to the Internet Bug Bounty.

Re:$100k donation to the Internet Bug Bounty by rnprince on Friday July 21, 2017 @04:47PM (#14823654)
I wondered for a moment if this could incentive developers to introduce bugs for their friends to "find," but then I remembered that hackers are already incentivized a lot more to sneak vulnerabilities into FOSS.
[ Parent | on HN ]
Re:$100k donation to the Internet Bug Bounty by ufmace on Friday July 21, 2017 @07:18PM (#14824474)
IMHO that would be a legitimate use of the award. If your review and merge process is bad enough that somebody can get malicious code into your releases, then that's a serious bug in your process, and whoever proved that it's there deserves the bounty just as much as someone who found an ordinary bug.
[ Parent | on HN ]