Should be given $5-10million under NDA. No headlines.
replyThe bounty payouts must be public in order to serve as an incentive.
replyThat incentive works both ways. For instance employee sneaking in a security hole and then selling it to a mate so they can collect the bounty.
replydeleted
replyJust imagine what the press would be when somebody breaks that NDA
reply>should be paid multiple years of a high end vuln researcher salary per single discovery
replyWhat? Why would anyone work at a company paying them that much less than they pay the contractors?
[dead]
reply