3 ms·
Hi, OP here, The total amount was just under $80,000 in 120 days. The table reflects payouts for bugs I was able to disclose, there are a fair few bugs worth >
by infosecau 10y ago
Hi, OP here,
The total amount was just under $80,000 in 120 days. The table reflects payouts for bugs I was able to disclose, there are a fair few bugs worth >7k that I wasn't able to include in that table. Some platforms/programs explicitly asked not to be listed there.
- modeless 10y agoOh, even in the summary table? Wow, that's even more impressive! And as a side project while working full time too. Have you estimated your earnings if you made this your full time job (ignoring burnout for the moment)?
- a1a 10y agoI just wrote a comment in another thread about bug bounties being cheap. Assuming you work 8 hours a day, your hourly salary would be $83,3. Wow! Do you think your frequency is somewhat maintainable? I myself dream about working full time with bug hunting but have only gotten to a point where I report a few bugs on a hobby basis. To me it feels weird skipping my consultant salary for small payments and sometimes even a "good job dude, here's a t-shirt".
- infosecau 10y agoI wasn't able to maintain the frequency after 120 days. I had started the project and was hoping to do 365 bugs in 365 days, however I stopped at 120 days after I had realized that continuing at such a rate would lead to significant mental health issues. In addition to that, I work full time and participating in bug bounties was/is purely a part time endeavor of mine. Perhaps if I worked full time on bounties I could keep up. Not entirely sure how it would work out, but it would be a risky journey at first nonetheless.
- jevinskie 10y agoWould you be willing to further explain your mental health concerns? Was it a worry of burnout, undesirable hyper-focus on bug finding, or something else?
- cloudjacker 10y agortfa