A field that definitely has a problem with replication is Computer Human Interaction. There are a lot of user studies in that field and you basically never see a study done twice. The setup of the studies usually doesn’t even allow it to be repeated as it hinges on some proprietary software written for that very study that is not released to the public.

I see the same issues also in computer science especially when looking into recent trends such as AI or blockchain/NFTs before that. There are definitely areas that are more rigorous than others but the replication crisis is a problem in many many scientific fields. If your results are not completely outlandish and don’t go against the vibe, no one will ever bother to check your results.

If you’re at home and then go to the game, how anonymized is your movement data really?

Yeah, I agree that any bug report on such a technical level should contain scripts or similar to reproduce the finding but that’s not the same as a full blown proof of concept exploit and I think to require an exploit sets the bar too high. A vulnerability is a vulnerability, no matter whether there’s an exploit or not. If you commission somebody to do a pentest you usually don’t get exploits either.

The researchers need to provide proofs of concept. Actual functional exploits.

Talking in general, not for this very issue: In my experience, providing a proof of concept is often a lot harder than simply fixing the issue. For an open source project it’s probably more helpful if the reporter provides a fix or at least a recommendation on how to fix it

Yeah, it’s an important skill to both be able to communicate your achievements and to be able to interpret achievements of others correctly (i.e. be able to see through their bs) in any job setting.

Most science can’t be done on a basic income, you need funds to buy equipment, to operate equipment, and maintain equipment. Most science also can’t be done alone. You have to be able to sell others on your ideas, in any economical system that is not post-scarcity.

At least in Germany, depending on contract, monthly payments vary heavily. For instance the labour agreement for the automotive industry contains a 13th salary at christmas time, vacation pay in summer, a bonus in spring depending on company performance, a potential bonus if you pass on some vacation days and more. Other contracts only have a monthly salary and no bonuses. My contract has only one bonus depending on company performance in April while my wife gets 12.8 monthly salaries (1.8x salary in November as end-of-year bonus). To compare job offers in any way, you can only go with the annual number.

You’re not the main character