upvote
What kind of auction would you like to run?

Remember that you can sell the same vulnerability to multiple people: it's software you can copy.

reply
Maybe needs a Good-Guy-Buy-It-Now w/instant delivery at a fair price. (OK that’s kind of a threat—you’re running an auction and you have the price the corp has to pay to avoid the auction ending.)

$1k is so dumb and the fact we’re discussing auctions is proof (hello, Sundar, what you doing over there?).

Guess this will change after the next e.g. nationwide hospital ransomware by a hacker who publicly laments bounty rates, if the news cycle accommodates the story long enough.

reply
it seems unlikely google's lawyers would go for this
reply
Maybe some code is so important and heavily trafficked it becomes a public works project, and various legs can bid for pieces of the project, line how all infrastructure works.
reply
well that's why setting it up is hard, because you would want to do it in a way that what they want doesn't matter.
reply