S0:E48: Google Pauses Open-Source Bug Bounties Over 'AI Slop,' Plus a $750K Hidden-VM Extortion Case
"Google just paused its open-source bug bounty program — not because bugs stopped mattering, but because AI-generated submissions buried the humans who have to validate them.
On today's Breach Please, Jess and Jake dig into:
• What a bug bounty actually buys a company (hint: it's not silence, it's time)
• Why Jake calls "responsible disclosure" an offensive term — and what he'd rather you call it
• The reality of "AI slop": unreadable reports, no reproducibility, security teams burning hours just to find out something's working as designed
• Why private, invite-only bounty programs might be…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.