Just checking, they will, like *tell* everyone when this happens so that people don't waste their time? @GoogleVRP
Most Activity
To make my position clear here, Google should DEFINITELY announce when this occurs – otherwise people will continue to sit on exploitable bugs and put Chrome users at risk
Just checking, they will, like *tell* everyone when this happens so that people don't waste their time? @GoogleVRP

@moyix @GoogleVRP

@moyix Or send them in and not get paid?

@JoeAbbey @GoogleVRP They should definitely tell people though, it benefits them! Otherwise people will needlessly sit on exploitable bugs because they're hoping to get a full chain, which puts users at risk.

@moyix @GoogleVRP Is it really $250k, or nothing at all if you’re not one of the 4? Seems odd, like they under-budgeted and over-estimated their own security.

@PenfoldDavid A full chain requires multiple exploitable bugs, I'm saying people with partial chains will hold out