#14 - Should someone be paid for finding a security vulnerability?
Chuck Harris - Astrixs -In short yes, people should be able to make money off of their research and time. As long as software companies fail to produce fully tested applications, there will always be vulnerabilities. Don’t get me wrong, software companies go through quality assurance, but at best it is to ensure that the applications function as they were intended, not for exploits.
Symantec is one of the smarter organizations in their approach. Pay the general populas to find your expoits or vaulnerabilities. In the end they are making your products/solutions that much better.