The same toolsmiths who tackled messaging fragmentation in the 2000s are still at it in the 2020s, in a higher-stakes environment where laws like the DMCA and CFAA pose chilling legal risks. Nevertheless, they're plugging away at this unglamorous, essential work.
Take Gary Kramlich, the sole full-time developer on Pidgin. Kramlich quit his job in 2019 and has been living frugally on his savings and a small grant while undertaking a top-to-bottom refactoring of Pidgin's venerable code-base.
6/
He's got another month or two before he'll have to go back to a day-job (unless he finds a funder!), but in the meantime, the giant cyber-arms dealer Zerodium has offered a $100k bounty for weaponized exploits in Pidgin's code that can be used to attack Pidgin users.
$100k is about four years' budget for Kramlich - money he pays out of pocket - while Zerodium is willing to scrape that up from behind its sofa-cushions to pay for weapons that hurt Pidgin users.
https://therecord.media/zerodium-acquiring-zero-days-in-pidgin-an-im-client-popular-with-cybercriminals/
7/
He's got another month or two before he'll have to go back to a day-job (unless he finds a funder!), but in the meantime, the giant cyber-arms dealer Zerodium has offered a $100k bounty for weaponized exploits in Pidgin's code that can be used to attack Pidgin users.
$100k is about four years' budget for Kramlich - money he pays out of pocket - while Zerodium is willing to scrape that up from behind its sofa-cushions to pay for weapons that hurt Pidgin users.