Linked by Anthony Haywood on Wed 5th Jan 2011 15:44 UTC
Thread beginning with comment 456083
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
Anyway most of the people who pentesting and fuzzing apps for bugs would agree that the 1-3k offers are low prices especially from those big companies.
I wouldn't say that because I think that in large software like those mentioned in the article, the number of bugs may be large as well. Yes, the ratio of time spent (or personal investment) over money isn't favorable and I certainly wouldn't participate in these "bug hunts" but from the companies' perspective, it is risky. And yes I am not one of the people you are referring to.




Member since:
2005-12-16
So, are these incentives the best way to make sure your applications are secure?

Yes. Whats your problem with it? at least poor russians & ukrainians have other opportunities to make money. I bet they sending in most of the bug reports.
The link missing from the article however theres a unicode char â€"
Anyway most of the people who pentesting and fuzzing apps for bugs would agree that the 1-3k offers are low prices especially from those big companies.
See where your money goes if you donate https://donate.mozilla.org/page/contribute/openwebfund
$75.00 - T-Shirt and dino plush toy please!