[urxvtcd]

How isn’t a knowledgeable person incentivized to find vulnerabilities but not disclose them?

[tptacek]

I don't understand your question, sorry.

[urxvtcd]

Yeah, sorry for not being clear enough. I just struggle how a good faith market can even exist. I immediately start thinking how participants would be incentivized to cheat by neglecting or even introducing vulnerabilities to win. Maybe I’m just a bit too cynical and/or should do more reading on the topic.