News for hackers. Stuff that matters.

A comment on $36k Google App Engine RCE. Parent comment

Re:$36k Google App Engine RCE by mixedCase on Monday May 21, 2018 @04:49PM (#17121717)
His bounty is equivalent to a year's salary for a very good senior developer in here. So I believe his point stands.
[ Parent | on HN ]
Re:$36k Google App Engine RCE by ggg9990 on Monday May 21, 2018 @05:21PM (#17121931)
Yes, but I don’t think you find a ton of highly skilled 18 year old software engineers in the US selling RCEs in the black market for $200K, so I’m not sure you find that in Uruguay.
[ Parent | on HN ]
Re:$36k Google App Engine RCE by tptacek on Monday May 21, 2018 @05:23PM (#17121948)
You don't find a ton of people of any age anywhere selling serverside RCEs in individual websites for $200k, or $20k, or --- I will go out on a limb here --- $2k.

The $2k limb is shaky because I guess in theory you could buy a GCE RCE for $2k and flip it to Google for their bounty payout, which will probably be at least $3,133.70.

[ Parent | on HN ]
Re:$36k Google App Engine RCE by GFischer on Wednesday May 23, 2018 @02:19PM (#17136580)
There's been a bit of salary inflation here, but yes, it's a very good payout and probably a year's salary for a mid-level developer (I'm a developer in Uruguay).

He'll have to pay taxes on it though (if he has no other income it won't be that bad, maybe 20%).

[ Parent | on HN ]