Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
vntok
4 months ago
|
parent
|
context
|
favorite
| on:
How we exploited CodeRabbit: From simple PR to RCE...
Why would they pay anything? The researchers offered them the vuln analysis for free, unprompted.
If anything, they got paid in exposure.
cube00
4 months ago
[–]
Let's hope the grants keep coming in because those researchers will start getting offers from the darker corners of the web if bounties aren't paid.
vntok
3 months ago
|
parent
[–]
It's their choice. If the researchers
choose
to accept and service criminal offers from darker corners of the web, they should be prosecuted as the criminals they have become.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
If anything, they got paid in exposure.