kaal:claim:4734750-005

Bug bounty programs are structurally compromised by their reliance on a trusted intermediary that extracts high commission fees and may hold interests that conflict with the software vendor.

Source quote, verbatim

they use a trusted intermediary that charges hefty commission fees and may have a conflict of interest with the software vendor

From

Wulf A. Kaal, Code Review DAO (2024), Community Audits, p. 9
https://ssrn.com/abstract=4734750 · source PDF

Cite as

Wulf A. Kaal, Code Review DAO (2024). SSRN: https://ssrn.com/abstract=4734750

Holds when

intermediated bug bounty platforms

Classification

failuresupport: arguedfailure: Intermediary capture of bounty programsfamily: recentralization-driftinstitutional-design

Verify

The quote above is an exact substring of the source PDF, whose sha256 is 60eadf91c0913468505afc664c8d8d1e1673d6c5326d031ca7060addb8ab2eda. Extraction method: pdf-text-layer.
Attestation record: colloquium/attestations/b29f9160a59bc22a...json
Verify the binding yourself: curl -s https://wulfkaal.github.io/claims/4734750-005.md | sha256sum