However, there are many promising junior developers that aren’t interested in the money as much as they’re interested in the challenge/fun. Sometimes high pay implies high expectations/stress and very little time to experiment/learn.

ex. I don’t want to work for a bank on fraud detection. I’d love working on AVL and in-vehicle remote monitoring systems though.

Also, this doesn’t take into account that the congestion/queueing issue might be at an upstream. I could have 100g from the customers local co to my core routers, but if the route is going over a 20g link to a local IX that’s saturated it probably won’t help to have fq/codel at the edge to the customer.

In my environment we have to add exceptions for Developers git folders for the realtime scanning for a similar reason. Apps with large numbers of small files or high frequency writes of smalls files, like temp files during the build process, need to be exempted unless you’re willing to pay the performance penalty for the security.

you cannot demand more than someone is willing to or able to pay, either a researcher out there will spend some time on it because it’s a relatively new contender to the market and they’re hoping for low hanging fruit, or they won’t.

obviously the bounty was enough for someone to look at it and get paid out for a find, otherwise we wouldn’t be having this conversation. trying to argue that they should set a bounty high enough to make it worth your time is pointless and a funny stance to take. feel free to ignore it or be upset that they aren’t offering enough to make you feel secure, it’s not going to make 100k appear out of thin air.

personally i appreciate Amazon for sticking it to Oracle with Corretto after the JRE licensing changes.

If I choose to open source something it’s because it’s either a passion project or it solves a problem that myself and others struggled to solve. I don’t open source it under the expectation of eventual profit. In fact, i hope by putting it out there it might become better as others improve upon it and we all benefit.

If you and a couple friends released an app that had 50k users and you’d not even broken even, can I claim my 100k by finding a critical RCE?

Law enforcement should have to constrain the request for information and the information provided to them should only be required to meet those constraints.

Nothing in the report appears to indicate that they made any effort to have the owner(s) in the first two examples volunteer the information at all.

This is no different than police attempting collecting cellphones from bystanders at the scene of a crime/disturbance as evidence. I'd be happy to provide law enforcement with any evidence relevant to the crime that may have occurred which I have, I'll be damned if they're just going to take my phone/vehicle and rip the entire device. I know what the information they collect looks like, and how that information is ingested. Your contacts, text messages, photos, etc are all going to end up in a database and potentially cross-referenced with any other ongoing cases.

If there was an easy and straightforward path to onboarding that would go a long way, but every time we look into it the process seems convoluted and unclear with too many options and potential foot guns.

While that fee may seem high, the developers are in someways subsidizing other developers that could never afford to build and maintain that infrastructure. They're also reducing the friction and on-ramping of new players/users. They are also providing the payment processing and handling billing/chargeback resolution.

Just the merchant fees alone would be would be 2-4% of revenue (not including losses to chargebacks and fraud/risk controls). The raw cost of bandwidth usage would be ~2 cents per 12GB game download (not including infrastructure to host/facilitate the amount of simultaneous downloads). The staff to manage billing issues/refunds. The raw amounts are small, but not insignificant considering that for every $20 they collect on a AAA title there are several indie games getting all the same functionality which only nets Valve $2.

Valve, Epic, Playstation, Xbox. The platforms are providing the ecosystem and platform that has allowed gaming to flourish at incredible rates, outpacing the motion picture industry and the sport industry.

I've noticed my device, an iPhone 13 Pro Max, will stay on LTE until I start downloading or streaming something. Then it will switch to 5g ultra wideband.

Though, I have noticed, that sometimes I'll be on LTE until I start streaming/downloading something. I figured it was a battery saving measure.