Vulnerability disclosure policies
Vulnerability disclosure policies
Posted Jul 17, 2010 8:39 UTC (Sat) by oak (guest, #2786)In reply to: Vulnerability disclosure policies by error27
Parent article: Vulnerability disclosure policies
> The trick is agreeing on a fair price. In the end you're paying for the information and the secrecy. So probably it should be a per day fee until the bug is fixed and a lump sum at the end.
How you could agree on the price without knowing the details about the issue e.g. is it even real?