Defensive efforts to patch vulnerabilities have little effect on exploits. They usually die from unrelated code churn.pic.twitter.com/cVZRZwrVzQ
Bounties have little overlap w exploit development. Not in skill required, techniques developed, or bugs discovered.https://twitter.com/withzombies/status/839870870545850368 …
pic.twitter.com/edUOweLXMt
-
-
does that mean that increased demand for exploits by intel & LE worldwide would not affect the bug bounty market economics?
@k8em0 -
According to the data in this report, bug bounties have little to no impact on the day to day lives of pro exploit devs.
- 2 more replies
New conversation -
-
-
Extraordinarily few people are capable of professional exploit development, an order of magnitude less than the number of bug bounty hunterspic.twitter.com/G1rD45w0xz
-
To those dismissing this RAND report: Ignore it at your own peril. This is the best data ever released on real exploit development, period.
- 7 more replies
New conversation -
-
-
That's a pretty huge claim. Is it over-generalized? Occasionally very good bugs come through bounty programs...
-
Even if it is a tiny percentage of bounty submissions, it can be a sizable proportion of bugs that are interesting to exploit devs
- 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.