If someone is willing to spend (e.g.) $1,000,000 on an exploit on the black mark... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pyre on June 17, 2012 | parent | context | favorite | on: Zero-day Exploit Price List

If someone is willing to spend (e.g.) $1,000,000 on an exploit on the black market, but the software developer is only paying $50 (or nothing!) for people to report exploits, don't you think that something is wrong with this picture?

greedo on June 17, 2012 [–]

That's because the costs of a security vulnerability are externalized.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact