> So why would anyone ever take a bounty instead of selling on the black market? Risk!
I like to believe there are also ethics involved in most cases
I like to believe there are also ethics involved in most cases
The conversation was moving between two possibilities only: either collect bug bounties or sell on the black market. I believe most (again: most, not all) security researchers collecting bug bounties right now would not start selling on the black market in case bounties disappeared. They would change their focus to something else to sustain themselves