Comment by thatsabadlook
1 day ago
Not worth the effort for a company supposedly worth a trillion dollars. The problem is oai can't afford all of its mistakes at the usual rate and they make bad press. A 100k bug could make a headline, but 5k for the same bug requires the average person to be educated enough to understand how bad these issues are.
Should be given $5-10million under NDA. No headlines.
The bounty payouts must be public in order to serve as an incentive.
That incentive works both ways. For instance employee sneaking in a security hole and then selling it to a mate so they can collect the bounty.
Just imagine what the press would be when somebody breaks that NDA
>should be paid multiple years of a high end vuln researcher salary per single discovery
What? Why would anyone work at a company paying them that much less than they pay the contractors?
[dead]