Learnings from kCTF VRP's 42 Linux kernel exploits submissions
> As the Linux kernel is a key component not just for Google, but for the Internet, we started heavily investing in this area. We extended the VRP's scope and maximum reward in 2021 (to $50k), then again in February 2022 (to $91k), and finally in August 2022 (to $133k).<p>So an award roughly equal to four months' salary for an average Silicon Valley engineer is considered "heavily investing" in security, when it comes to potentially industry-shattering exploits?<p>I imagine that anyone who knows where to look can easily find dozens of interested buyers willing to pay <i>a lot</i> more than that, from intelligence agencies and their contractors to crime syndicates.