The only model that makes no sense to me is the altruistic model. The vendor wants the researcher to do his code review for free and that doesn't quite fly. They are profiting from the vulnerability information but they don't want to pay for it.
More Quotes from Michael Sutton:
This is relatively easy to exploit. It takes some degree of social engineering -- the attacker would have to draw people to a malicious Web site -- but after that, there's no further intervention required. An attacker could leverage this to write to a file on the hard drive. And once you can write to a person's machine, you have full control.Michael Sutton
There is some irony there.
Michael Sutton
The nice thing is that a third party that has nothing to do with the VCP is deciding what the criticality is. We're still signing the contract with the researcher and we're still paying the fee for the specific contributor, but we're saying that if it results in a critical bulletin, there's a 10,000 bonus on the table.
Michael Sutton
We're not aware of any public exploit code for it at this time.
Michael Sutton
The attraction is that we are not bogged down in tremendous bureaucracies and processes that make it difficult to get the transactions done.
Michael Sutton
Many of our most valuable contributors consistently identify significant vulnerabilities that may never make the front page, but both avert major exploitation and secure considerable compensation through our rewards program.
Michael Sutton
Readers Who Like This Quotation Also Like:
Based on Keywords: altruisticIn that I found being able to talk to my family about my feelings, praying for strength and realizing that our lives have a deep purpose and the journey of our lives is to find out what that is and express it, was the only way I could have gotten through it.
Marlo Thomas
I think Bob Costas is terrific. He's so knowledgeable. He can talk about any subject, not just sports.
Jim McKay
I don't know about five guys against the world. It's more like five guys against these three chords, and we're gonna wrestle 'em down no matter what it takes.
Benmont Tench