Stephen Withers
Monday, 23 March 2009 11:04
Opinion and Analysis
Page 2 of 5
This admission has led to criticism of Miller by people who feel he has some kind of moral duty to disclose the flaws he finds.
But Miller told Naraine "I never give up free bugs. I have a new campaign. It's called NO MORE FREE BUGS. Vulnerabilities have a market value so it makes no sense to work hard to find a bug, write an exploit and then give it away."
I can see where he is coming from.
I'm sometimes asked to write articles free of charge, but I decline unless it's for a non-profit organisation and everyone involved is a volunteer.
If the editor is being paid, I expect to be paid too.
As Miller pointed out, Apple employs people to find bugs in its software, so why should he give up his findings without being compensated?
In the event that someone stumbles across a bug in the course of normal activity, they'll typically ignore it or report it to the vendor. Someone there will be tasked to investigate, and (we hope) it gets fixed in the next update.
But does that always happen? See
page 3.
