Bug bounty programs are nature enough and lucrative enough that there are some researchers making a very comfortable living from them. But not every technology company has one, and not every researcher is looking to make money for themselves on these projects. David Jacoby of Kaspersky Lab and Frans Rosen of Detectify recently decided to take a different tack on bug bounties and see how much money they could raise for some good causes with a weekend of hacking. Dennis Fisher spoke with Jacoby and Rosen at the Security Analyst Summit about their project and what other researchers could do to follow suit.
