← Back to context

Comment by jsw97

8 hours ago

In the past I would have thought this would incentivize finding bugs that might never be found. However it is now clear that all bugs that can be found will be found. So this makes a ton of sense.

> In the past I would have thought this would incentivize finding bugs that might never be found.

Isn't that a good thing?

> However it is now clear that all bugs that can be found will be found. So this makes a ton of sense.

If Google can find all the bugs nowadays, presumably with AI, why still pay a bug bounty? At least by this logic, bug bounties make less sense now.

  • Sure they make sense — you need some incentive to drive the price to zero.

  • Because there’s still a sizable group of people who see $1,000 from Google as more than $1,000.

    Even a resume item.