News for hackers. Stuff that matters.

A comment on Facebook paid $4.5K for disclosure of my user account exploit. Parent comment

Re:Facebook paid $4.5K for disclosure of my user account exp... by pkfrank on Friday May 31, 2013 @11:38AM (#5799217)
This assumes a linear relationship between (Bounty for vulnerabilities) :: (Identified outstanding vulnerabilities)

Presumably, one would see diminishing returns in the ability to find "low hanging fruit" exploits, and thus the economics @ a $50k pay-out would be even more attractive for Facebook.

[ Parent | on HN ]
Re:Facebook paid $4.5K for disclosure of my user account exp... by kbenson on Friday May 31, 2013 @11:43AM (#5799243)
It's a market. As the vulnerabilities become harder to find, Facebook will have to increase the payout to continue to find takers, if they view it as a worthwhile investment (they may decide that since vulnerabilities are harder to find the program has less merit, which I would disagree with).
[ Parent | on HN ]