News for hackers. Stuff that matters.

A comment on Google launches new vulnerability reward platform. Parent comment

Re:Google launches new vulnerability reward platform by thaumasiotes on Wednesday July 28, 2021 @06:50AM (#27982340)
You're proposing that they do a lot of work for no benefit. What would they get out of it?

You're also still failing to account for the fact that reports rarely become public. I can refer you, again, to a random number just as easily as I can refer you to the calculated hash of my bespoke summary of an issue that was reported eight years ago.

[ Parent | on HN ]
Re:Google launches new vulnerability reward platform by newphonnewaccnt on Wednesday July 28, 2021 @07:46PM (#27991156)
As stated previously, it wouldn't work unless the company was prepared to disclose all reports at two stages: 1) hash of unpredictable description of the issue when the issue is reported, 2) hash input when the issue becomes public.

There would be no benefit except for a tiny amount of goodwill, so it's almost certainly not worth it. This is simply a method to address the duplicates issue. Nothing else.

[ Parent | on HN ]