Hacker News Reader

Comment by ErikAugust | Hacker News Reader

Yeah, there would likely be a real net-positive to corporations trying to damage each other's credibilities via security disclosures. (No sarcasm - I believe it).

View on HN

If they can't manage to fix a severe security hole within 90 days, I'd say that they deserve to have their credibility destroyed.

I'm with GP on that we need more programs like project zero.

Unless, the retaliation is done by the NSA where they don't want any more of their precious 0 days getting leaked.

NSA guy #1: "Hey, Fred, Google released another Microsoft zero day. Those things cost us millions to buy. Can we punish Google somehow?"

NSA guy #2: "Sure, let's release our Google zero day!"

#1: "Oh, but didn't we spend millions on that?"

#2: "Yeah, but it'll really screw up Google!"

#1: "Okay, do it."

Google: "Oh my, thanks for pointing out that exploit. We're so glad the NSA is getting back to its mandate to alert American companies and organizations when it had identified security holes. And....fixed. Let us know if you find any more!"

Google Project Zero: burning NSA budgets since 2014!

pretty sure they can afford it ;)

Why else do you think the US needs a 10% military budget increase?

Thanks NSA! Where do you want us to send the bounty award to?

No need, it's already been debited from your account.

I feel like you might be sarcastic, but I really do think so.

No sarcasm, I think so too.

We are going to make the world a better place out of petty spite!

Reply on news.ycombinator.com