News for hackers. Stuff that matters.

A comment on Ask HN: How do you find developers for open source bug bounties?. Parent comment

Re:Ask HN: How do you find developers for open source bug bo... by andruby on Wednesday June 19, 2024 @05:31AM (#40726520)
Are you talking about fixing known bugs, or a "security bug bounty" where they are paid to report unknown security issues?
[ Parent | on HN ]
Re:Ask HN: How do you find developers for open source bug bo... by bashwizard on Wednesday June 19, 2024 @07:55AM (#40727393)
Security related vulnerabilities.
[ Parent | on HN ]
Re:Ask HN: How do you find developers for open source bug bo... by andruby on Wednesday June 19, 2024 @01:24PM (#40730357)
That’s very different than what the OP question is about. Both are called “bounties” though.

One is getting paid to write code that fixes bugs or adds functionality to open source projects. (Pays very little and we suspect nobody makes a living from)

The other is doing security research and reporting on vulnerabilities. Here typically no fix is provided. You are paid for the discovery. Plenty of good researchers make a living on these security bounties

[ Parent | on HN ]