News for hackers. Stuff that matters.

A comment on RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit. Parent comment

Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by jodrellblank on Tuesday December 21, 2021 @11:39AM (#29639063)
Make bug bounties pay $250k and people will have their friend inside add some bugs for the outsider to find, and share the payday.

Pay-per-bug-found incentivises plenty of counterproductive things as well, especially if we're talking about people who happily sell to anyone on the black market.

[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by darkarmani on Tuesday December 21, 2021 @03:44PM (#29641885)
You can do that today with blackmarket exploits, so why do you think actual bug bounties will cause this problem?
[ Parent | on HN ]
Re:RCE in Visual Studio Code's Remote WSL for Fun and Negati... by jodrellblank on Tuesday December 21, 2021 @09:19PM (#29644839)
Because then you'll be able to do it without needing any black market connections or transactions, which will make it easier, more of it happens above board, there's less to trace or indicate any problem so it's less discoverable, the payment is from a trusted source.

Why would making it easier make it happen less often?

[ Parent | on HN ]