Hacker News Reader

1. Work at Microsoft. Make a bug. 2. Tell your "security researcher" buddy. 3. Split $10m in zcash.

Since you are already being a criminal, you could go all the way and sell it to a security agency, Zerodium or another criminal.

The company you work for, once they track the code back to you, will investigate you to make sure you did not make profit on it.

Thats why many doing that kind of stuff probably use a third party that keep money for a definite amount of time.

Would you pay 100x as much for a service that is protected by that level of award?

The reason you pay so little is to not encourage ppl to even start looking.

Knowledge required to find stuff like that is very scarse. And you have to know where to look for.

Chances to find something really big are so small that its not worth it to look for them finnancially.

Thats why ppl don’t do that often. They do it if they have long cooperation history with given company because they are treated as an employee.

TL;DR is that you don’t want to encourage ppl to start looking. All software has bugs, so its only a matter of time until someone finds something.