rez0 on bug bounty irony: hack 70% of the world, make nothing
rez0__ · x · 2026-10-22
Security researcher rez0 shared a wry observation from a non-hacker friend who asked how much the php2shell bug finder earned: hack a small company, make a little; hack a big company, make a lot; hack 70% of the world, make nothing.
The quip points at an absurdity in bug bounty economics — vulnerabilities with the broadest blast radius (like flaws in components underpinning most of the web) often have no clear paying victim, while single-company bugs fetch real bounties or black-market prices.
More from Fun
- 'Lean-washing your slop': devs mock formalization startup hype as a VC scam — ludwigABAP · 2026-10-22
- Grok Bot glitches and goes black within minutes in user hands-on test — Angaisb_ · 2026-10-22
- Big security bug came from random passwords between 0-256, not 256-bit — teortaxesTex · 2026-10-22
- Security debate: Railway hack 'far more impactful' than PHP2Shell — MicahBerkley · 2026-10-22
- Reddit user shows AI can crack jokes now — KyriosSan · 2026-10-22
- Opus 5.5 built a fully playable city sim inside Minecraft, traffic and all — Angaisb_ · 2026-10-22