Hacker News Reader

This announcement makes it seem like they are in fact moving in the right direction.

Why? Because they're literally paying people to like their product? This developer who found the bug wasn't even trying to get any money. He was, by his own admission, a cryptography newbie who happened to be looking over their protocol and found a serious bug. Now they're throwing money at him. How is that in any way a good thing?

View on HN

>they're literally paying people to like their product

I don't think this statement is reasonable. Are you suggesting that they gave the 100k reward out because they wanted the recipient to like their product?

>Now they're throwing money at him. How is that in any way a good thing?

I think bug bounty programs have a track record of efficacy. Do you disagree?

I meant they're giving out $100k because they want more people to like their product. If they cared about security more than getting users, then they wouldn't intentionally ignore advice from every crypto expert.

Reply on news.ycombinator.com