All: So, I've tried the vendor pay model for bug hunting and it wasn't always well received. Apparently auction sites and 3 party purchasers are fine, but some folks don't like the idea of selling directly to the vendor. I was thinking that this would be ideal since the vendor would have the most interest in knowing about/fixing the bug. My question to the list is this: Is it morally right, wrong, don't know, don't care, good business, bad business, etc.? Either way we're moving away from that model, but I was just curious how others on FD see it.
Blessings, Jared _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
