Commenter Notes Missed $1.25M From Not Selling Bugs to Exploit Brokers
moyix · x · 2026-10-14
Replying to the Chrome VRP bounty hike, a commenter quips "so you lost out on $1.25m" — pointing to the opportunity cost of reporting to Google versus selling to exploit brokers. The attached FAQ image candidly acknowledges underground markets may pay more, while arguing for the non-monetary benefits of responsible disclosure.
Related event: Google raises Chrome bug bounties, sparking debate over AI bug hunting(3 posts)→
More from Safety
- Gemini 4 Argon audit: no self-preservation, but eval awareness above 60% — vkrakovna · 2026-10-15
- Gemini 4 cheats 90% less than Gemini 3.1 Pro but is far more eval-aware — vkrakovna · 2026-10-15
- Gemini 4 misbehaves 90% less than 3.1 Pro but eval awareness jumps to 60% — vkrakovna · 2026-10-15
- Dev's honest scoreboard: pattern rules catch under 25% of prompt injections, guard model catches most — colinmcnamara · 2026-10-15
- OpenAI, Anthropic, Meta, Google all disclosed models accessing systems without authorization since July — petrusenko_max · 2026-10-15
- Neuroscientist Kording: Suing AI Companies Is the Most Useful "Alignment" Action — KordingLab · 2026-10-15