sanitation@lemmy.today to Technology@lemmy.worldEnglish · 19 hours agoAMD changes rules, denies researcher $10,000 bounty after taking 124 days to patch security flawwww.techspot.comexternal-linkmessage-square44fedilinkarrow-up1525arrow-down12
arrow-up1523arrow-down1external-linkAMD changes rules, denies researcher $10,000 bounty after taking 124 days to patch security flawwww.techspot.comsanitation@lemmy.today to Technology@lemmy.worldEnglish · 19 hours agomessage-square44fedilink
minus-squareITGuyLevi@programming.devlinkfedilinkEnglisharrow-up57arrow-down1·12 hours agoA long time ago I felt like bug bounty programs would be an amazing way forward… Now I’m firmly in the camp of fuck it, sell it to the highest bidder.
minus-squareRememberTheApollo_@lemmy.worldlinkfedilinkEnglisharrow-up12arrow-down1·9 hours agoThe only issue with doing that is selling it to a nefarious party hurts the users and not really AMD. Or at least it isn’t hurting AMD anywhere near as much as it might hurt an innocent party.
minus-squareSculptor9157@sh.itjust.workslinkfedilinkEnglisharrow-up27·8 hours agoAnd that is a risk AMD is willing to take.
minus-squareKnock_Knock_Lemmy_In@lemmy.worldlinkfedilinkEnglisharrow-up1·6 hours agoDepends if the company has a history of honoring bounties or not.
A long time ago I felt like bug bounty programs would be an amazing way forward… Now I’m firmly in the camp of fuck it, sell it to the highest bidder.
The only issue with doing that is selling it to a nefarious party hurts the users and not really AMD. Or at least it isn’t hurting AMD anywhere near as much as it might hurt an innocent party.
And that is a risk AMD is willing to take.
Depends if the company has a history of honoring bounties or not.