News for hackers. Stuff that matters.

A comment on Curl: We still have not seen a single valid security report done with AI help. Parent comment

Re:Curl: We still have not seen a single valid security repo... by billyoneal on Tuesday May 06, 2025 @05:38PM (#43909922)
There are places that will pay bounties on even very flimsy reports to avoid the press / perception that they aren't responding to researchers. But that's only going to remain as long as a very small number of people are doing this.

It's easy for reputational damage to exceed $1'000, but if 1000 people do this...

[ Parent | on HN ]
Re:Curl: We still have not seen a single valid security repo... by cratermoon on Wednesday May 07, 2025 @01:19PM (#43918338)
One might even call it reputational blackmail. "Give me $1000 for this invalid/useless bug report or I'll go to the most click-baity incompetent tech press outlets with how your product is the worst thing since ILUVYOU."
[ Parent | on HN ]