Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
vntok
on Aug 19, 2025
|
parent
|
context
|
favorite
| on:
How we exploited CodeRabbit: From simple PR to RCE...
Why would they pay anything? The researchers offered them the vuln analysis for free, unprompted.
If anything, they got paid in exposure.
cube00
on Aug 19, 2025
|
next
[–]
Let's hope the grants keep coming in because those researchers will start getting offers from the darker corners of the web if bounties aren't paid.
vntok
12 months ago
|
parent
|
next
[–]
It's their choice. If the researchers
choose
to accept and service criminal offers from darker corners of the web, they should be prosecuted as the criminals they have become.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
If anything, they got paid in exposure.