Under Microsoft's new bug bounty program one of my zerodays has gone from being worth $10,000 to $1,000 
-
it sucks, but as long as it is transparent and played fair it is just the free market with all its good and bad. I like when a company have the confidence in its own product it requires to have high bounties though. Why would I trust the security of something its creators dont
Now this is pure speculation from my side, but I could imagine a situation where it would be nessesary to free resources up to work on mitigations against bug classes instead of constantly trying to play cat and mouse game- Remember in the end it is all about $
-
-
Do the average consumer really care about the same things as us? I doubt it, maybe being secure is not bringing additional value enough to the product. Maybe some bastions are not worth defending... Personally I would recommend having high enough bounties to make it more appeling
-
to submit then drop on twitter. Especially if submission process is not smooth it can easily become more appelaing to just drop it for credits or as a statement. But do that matter at all? Will it cost money? I dont know
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.