[factormeta]

seems this just encourage researchers to sell zero-day exploits to organize crime and/or alphabet letter agencies. No wonder we have no digital security at all! Big tech don't really care about security or privacy. Why are we even using their stuff?

[tptacek]

It does not. Bounties and zero-day markets are different things. Lots of people actively sell to both.