The Unintended Consequences Of Rewarding Beg Bounty Hunters – CIO East Africa
Oliver, like most open-source developers, works part-time on the project. Together with five others, he makes up the security team for TYPO3. They typically receive about five security reports a week. Considering TYPO3 is a PHP application of some complexity, this is what we might expect. Around July 2020 they noticed they were receiving higher volumes of submissions similar to the ones I have written about previously. At this point, the number of weekly tickets had risen to between 10 and 15. In February 2021 there was an explosive increase in submissions, but we will get to that in a moment...
Source: cio.co.ke