I started looking because I wanted to find bugs in Signal for iOS, which uses CocoaPods: https://github.com/signalapp/Signal-iOS/blob/master/Podfile
This is why some customers require various security certifications. Too bad the certifications often focus on whether your employees have three groups of characters in their passwords instead of an actual security audit with penetration testing.
My point being, how to make people want a proper audit and how to commuicate you had one. From another point of view, how do you justify the cost without including the risk of being hacked? Because even in this instance, they were (probably) not hacked, and your reward was likely lower than an audit would cost.
A company could simply dismiss most reports as duplicates, maybe even with a fake hall of fame, and get away with this for a long time.
> I’m trying to give 10,000 mosquito nets to charity! If you liked this post please consider donating a $2 mosquito net.
Not to diminish the finding mind you, just that I was surprised to hear about malaria nets.
https://www.nytimes.com/2015/01/25/world/africa/mosquito-net...
I don't understand what this means
It's a suggestion that everything is only done on the basis of what will result in the most benefit, ignoring the mortality of how it is achieved.
[1] https://en.wikipedia.org/wiki/Jeremy_Bentham [2] https://en.wikipedia.org/wiki/Jeremy_Bentham
Unfortunately not - the hole size on the nets is much smaller than a normal fishing net, so it doesn't let juveniles escape, reducing the future fish population.
A lot of the nets are also treated with insecticide, which means you're essentially dumping insecticide into the water, which can be dangerous to humans and toxic to fish.