Ask HN: How do you find developers for open source bug bounties?

Post by r3db34rd » Thu, Jun 20, 2024, 2:04 AM UTC

newaccount74 wrote: post #14

I always wonder if there is anyone making a living of bounties? I've once considered it, but the public bounties that I could find were so laughably low that I just saw no way to make it work. I guess it could work if there were a lot of bounties for a project that you are familiar with, so that you can fix them quickly, but there are so few bounties available that you probably have nothing to do after a week or so.

Post by MiscCompFacts » Thu, Jun 20, 2024, 1:56 PM UTC

Suppafly wrote: post #60

jpt4 wrote: post #7

Pay successful bounty submissions on a faster than net 180 time frame. A friend was interested in the rather extensive Expensify bug bounty programme [0], but the red tape involved created far too long a turnaround time between claiming a ticket and receiving compensation. [0] https://github.com/Expensify/App/issues?q=is%3Aopen+is%3Aiss...

Do they get to claim it and then work on it, or do they need to have a solution already to claim it? net 180 wouldn't be bad if you could reserve several of them to work on at a time. It'd suck to work 'for free' that first few months, but then you'd have consistent income coming in regularly after that.

Post by Suppafly » Thu, Jun 20, 2024, 5:07 PM UTC

MiscCompFacts wrote: post #63

Suppafly wrote: post #60

Earlier quoted context omitted.

Do they get to claim it and then work on it, or do they need to have a solution already to claim it? net 180 wouldn't be bad if you could reserve several of them to work on at a time. It'd suck to work 'for free' that first few months, but then you'd have consistent income coming in regularly after that.

I think I would prefer whomever fixed the bug first, I know that’s not ideal for people who put the time and effort in.

Post by kazinator » Thu, Jun 20, 2024, 11:22 PM UTC

manuelmoreale wrote: post #66

Suppafly wrote: post #64

Earlier quoted context omitted.

I suppose it depends on how you are defining normal. Does that mean owning a home and vehicle and supporting a wife and kids, or does that mean sharing an apartment with multiple people and using public transport and not having any savings? I get that the cost of living is lower in Italy, but different people have different ideas about what constitutes comfortable. Just from googling, the 2k seems like it'd be a bit…

2k/mo pre taxes as a self employed would allow you to live a normal life meaning you’d not struggle to get through the month. 4k/mo would allow you to easily buy a house and live an above average life. This is obviously true for most of the country and it’s different if you want to live in one of the big cities but that goes without saying.

Post by manuelmoreale » Fri, Jun 21, 2024, 5:59 AM UTC

kazinator wrote: post #67

manuelmoreale wrote: post #66

Earlier quoted context omitted.

2k/mo pre taxes as a self employed would allow you to live a normal life meaning you’d not struggle to get through the month. 4k/mo would allow you to easily buy a house and live an above average life. This is obviously true for most of the country and it’s different if you want to live in one of the big cities but that goes without saying.

If you happen to be supporting a four-member family on that 2K, it's barely above the poverty line. Even when you're young and single, it behooves you to think about retirement; it's sooner than you think. You need a safety net in case something happens, leaving you unable to work for a long time. If you support a family, you have to think about things like education funds for the kids, and what happens if you sudden…