News for hackers. Stuff that matters.
Re:Remote Code Execution on a Facebook server by meowface on Friday August 24, 2018 @06:24PM (#17838239)
Honestly, just a gut feeling. (So, my ass.) I just feel like RCE should warrant somewhere around that much by default, even if the overall impact isn't high in a particular case. Some combination of potential impact and nature of the vulnerability/exposure should go into reward calculations, in my opinion.
Re:Remote Code Execution on a Facebook server by tedunangst on Friday August 24, 2018 @08:36PM (#17838860)
But is RCE worth 15 because he got 5? If he'd gotten 1, would you say he deserved 5? Or 3?
Re:Remote Code Execution on a Facebook server by meowface on Sunday August 26, 2018 @07:31PM (#17848505)
I think I would've said something close to $15k either way. $5k isn't insulting (in my opinion) given the context. $1k would definitely be insulting.