Something that’s been bothering me for years in the security world: why do researchers demand bug bounties for vulnerabilities in open source projects, when the very contributors maintaining and fixing those issues get nothing, just goodwill?

It feels deeply unfair. The burden falls on unpaid maintainers, yet bounty hunters get rewarded. If you want a paid bounty, maybe help fund the people who actually fix the mess too.

#opensource #security #bugbounty

RT @intigriti@twitter.com

.@matrixdotorg@twitter.com just increased their #BugBounty rewards.
Now pays up to €15,000. Check it out:
https://app.intigriti.com/programs/matrix/matrix/detail

🐦🔗: https://twitter.com/intigriti/status/1367510635538485256

RT @intigriti@twitter.com

The @eu_commission@twitter.com just launched a public #EUFOSSA #BugBounty program for @matrixdotorg@twitter.com on @intigriti@twitter.com.
Pays up to €5,000. Check it out! 👇
https://go.intigriti.com/matrix

🐦🔗: https://twitter.com/intigriti/status/1348664734313312256