News for hackers. Stuff that matters.

A comment on Ask HN: How do you find developers for open source bug bounties?. Parent comment

Re:Ask HN: How do you find developers for open source bug bo... by newaccount74 on Wednesday June 19, 2024 @03:13AM (#40725680)
Can you elaborate? Who are these people? What kind of bounties do these people go after? Do they work on lots of small bounties or focus on a few big bounties? Do you personally know these people or are you just talking about the security researchers who discovered high impact issues in iOS?
[ Parent | on HN ]
Re:Ask HN: How do you find developers for open source bug bo... by bashwizard on Wednesday June 19, 2024 @07:51AM (#40727370)
I know some of them in person as I'm involved in the bug bounty scene myself. What they work on varies depending on skill set and interest. I do not personally know any security researchers with high impact vulnerabilites in iOS but those people get paid millions and you'll never hear about them.

What I do know is that they tend to sell their exploits through exploit brokers like Zerodium.

[ Parent | on HN ]