> In the past I would have thought this would incentivize finding bugs that might never be found.
replyIsn't that a good thing?
> However it is now clear that all bugs that can be found will be found. So this makes a ton of sense.
If Google can find all the bugs nowadays, presumably with AI, why still pay a bug bounty? At least by this logic, bug bounties make less sense now.
Sure they make sense — you need some incentive to drive the price to zero.
replyBecause there’s still a sizable group of people who see $1,000 from Google as more than $1,000.
replyEven a resume item.
deleted
reply