News for hackers. Stuff that matters.

A comment on Hackers claim to have breached Okta systems. Parent comment

Re:Hackers claim to have breached Okta systems by belter on Tuesday March 22, 2022 @04:53AM (#30763989)
Another misaligned incentive is to have a Bug Bounty program, but offer ridiculous low compensation, for highly critical findings that show complete compromise of your platform. That will make it clear you don't take security as a high priority, and the Bug Bounty was just to hit a compliance check list.

Some will take it as a sign they should poke further your system, or shop around for others paying better.

[ Parent | on HN ]
Re:Hackers claim to have breached Okta systems by jsiepkes on Tuesday March 22, 2022 @10:50AM (#30766768)
> or shop around for others paying better.

That's kind of a weird moral take on things. If you don't like the bounties offered then simply don't invest time in the platform looking for things to exploit.

[ Parent | on HN ]
Re:Hackers claim to have breached Okta systems by belter on Tuesday March 22, 2022 @12:43PM (#30768352)
That was not a statement about my morals, was about the moral of others...
[ Parent | on HN ]
Re:Hackers claim to have breached Okta systems by xvector on Tuesday March 22, 2022 @09:28AM (#30765803)
Companies with insulting bug bounty programs deserve to get hacked.
[ Parent | on HN ]
Re:Hackers claim to have breached Okta systems by hakre on Wednesday March 23, 2022 @03:46PM (#30782486)
The Bug Bounty Program effectively protects them from that.

You wouldn't know how insulting that is before going through a good of paperwork that legally tames your desires.

[ Parent | on HN ]