I don't know what I think about this post, but it's worth reading to understand one point of view on vuln research.https://twitter.com/thegrugq/status/627667860949569536 …
-
@dguido fwiw Mozilla's bounty was $3000 when you wrote that and is a bit higher now. Not that it changes what you were saying.
@dveditz thanks for the info. Yeah, $3k is a rounding error when put in perspective of total cost of attack.