News for hackers. Stuff that matters.

A comment on Google launches new vulnerability reward platform. Parent comment

Re:Google launches new vulnerability reward platform by askesisdev on Tuesday July 27, 2021 @03:35PM (#27976592)
Third party vendors don't buy vulnerabilities on Google's infrastructure and web services. Third parties like Zerodium are interested in 0days on Android, iOS, Windows, Chrome...

You could try to sell it to criminal organizations or monetizing the vulnerability yourself, but it doesn't make any sense to be in that situation if you are making six figures as a bug bounty hunter.. even if you didn't have any ethical qualms regarding such acts.

[ Parent | on HN ]
Re:Google launches new vulnerability reward platform by mtnGoat on Wednesday July 28, 2021 @02:09AM (#27980688)
False: Seven figures trumps six.

Think like a mercenary.

[ Parent | on HN ]
Re:Google launches new vulnerability reward platform by tptacek on Wednesday July 28, 2021 @03:00AM (#27981059)
No criminal organization is paying 7 figures for serverside vulnerabilities. They're not even paying 5 figures for them.
[ Parent | on HN ]
Re:Google launches new vulnerability reward platform by mtnGoat on Wednesday July 28, 2021 @10:14AM (#27983998)
5 figures is the minimum for good ones. $10k ain’t much.

Guess you need to meet richer criminals.

[ Parent | on HN ]