A Year in Google's Android VRP
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A researcher who filed 86 reports to Google's Android and Google Devices vulnerability program says they received only $250 for them, alleging that eight bugs were later fixed in shipped code after being closed without reward, that many closures contradict the current binaries, that a promised $250 payment remains unpaid…