Anyone finding a vulnerability now should really be submitting it to a broker instead of the company. Brokers pay way more for good exploits than the big guys (Google/MS/Amazon/etc) and won't just refuse to pay claiming you found an undocumented feature.
this post was submitted on 07 Oct 2026
138 points (99.3% liked)
Technology
88823 readers
3821 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
Apparently Google doesn't care about good PR anymore.
https://en.wikipedia.org/wiki/Don%27t_be_evil
~~Don't~~ Be Evil.
They have fully embraced it now.
They’ve been on that track for a while. I find it insane that people still want to use their services. I degoogled many many years ago.
👍
I had a hunch going into the article and I was right.
I could have had some pity for those devs who are supporting the open source ethos being flooded with AI grifters spamming bug reports for the money. However that pity instantly goes right out the window given that they're working for one of the biggest companies pushing AI and why tech hardware is becoming more and more out of reach for the average Joe.
I saw a PR to a project I follow that involves a specific piece if hardware. There are about 10 "solutions" in pr now of scammers trying to claim the bounty. None of them have even bothered to get the piece of hardware necessary to actually test their fixes. It's disgusting.
I'm very happy for Claude starting to mark their code, and hope it becomes easier to detect. I'm actually all for ai being used to solve these issues, but I think it should make you ineligible to collect a bounty on it if you use AI.
Well this isn't good
Hey, this is great. If Google wants their services to be less secure then so be it.
Services other people rely on