Hacker News Reader

The analogy is misused. You compare to give information that does not cost anything in time and works, while chasing bugs is anything but free hobbies (for some maybe but this should not be the case at the professional level).

Bug bounty are: "do your job almost free and be paid sometimes"

View on HN

In reality, people actually do stumble across many pretty bad bugs; for the ones that require "panning for gold", in addition to noting that there are tons of reasons why people might have been wandering past cars looking for keys (some good, some bad ;P)--including "academics"--I agree that this bug bounty program is not trying to solve that problem. There is too much attention here on the $200k tier instead of on the lower tiers.

I don't see the problem here. If the payment is not good enough then don't search for bugs and do domething else.

Reply on news.ycombinator.com