Hacker News Reader

> They are publicly funded so efficiency of cash flow is important

Bug bounty rewards are orders of magnitude cheaper than the damage the bugs can cause.

If they have a bug report form at all and employ people to screen and respond to bug reports, the bounty costs probably wont even add up to the cost of 1 additional employee

View on HN

I disagree, when you understand the way UK government works, any compromises will be cheaper in nearly every case along with requiring no action on their part in the first place which is even better. Planning the creation of a team to handle this will likely run in to the millions before you've even begun, that is the way it works. And noone resigns they just go in to hiding for a while ;)

Depends. In the UK we just wait for the minister in charge to resign. That's cheaper than a bug bounty :)

Reply on news.ycombinator.com