6 ms·

Yelp invites hackers to expose vulnerabilities through bug bounty program

64 points by pavornyoh 10y ago

strictnein 10y ago
The actual program, hosted by HackerOne: https://hackerone.com/yelp https://hackerone.com/yelp Already paid out $65,160.
- innoying 10y ago
  It's been private (invite-only) for about 2 years, they went public today.
NegativeLatency 10y ago
Why does the Yelp filter for "Open Now" not default to being turned on. It's so annoying when I'm looking for a place to eat, I have to remember to hit that specific button.
- mvd366 10y ago
  Not all businesses have their operating hours in Yelp's system. Given that, the choice comes down to either: A) Showing all businesses by default and giving the user the ability to only show restaurants which are definitely open at that time. or B) Hiding all businesses unless someone has supplied their operating hours explicitly. Even when this data has been added, it is not always accurate.
- j-bd 10y ago
  A lot of people search for businesses at times when many restaurants are closed (e.x. trying to find dinner reservations during the day) Other examples: - Searching for bars during work hours to get drinks at after work - Searching for clothing stores at night whose operating hours at 9-5 - Etc...
deleted 10y ago
[deleted]
foobarcrunch 10y ago
Fuck Yelp and their extortion tactics. Some "engineering PR" cannot make up for their complete lack of integrity, even if corrupt judiciary happens to legitimize it (judges, DAs are also beholden to campaign donors as well). (Legality ∩ mortality ⫉ ∅) http://kitchenette.jezebel.com/a-court-has-ruled-its-totally-cool-for-yelp-to-extort-b-1632255482 http://kitchenette.jezebel.com/a-court-has-ruled-its-totally...
- unit91 10y ago
  This has been debunked more than a few times, by the way. There's even a Harvard Business School study on the matter. [1] And a decent overview of the situation here: [2]. Yelp has also unequivocally denied the extortion charge [3]. While you might be tempted to dismiss it as propaganda, at least consider that Yelp is a publicly traded company -- i.e., if their post were shown to be a lie, it would be a criminal offense. Disclaimer: no personal stake in Yelp, I just prefer clarity on the issues. [1] http://people.hbs.edu/mluca/FakeItTillYouMakeIt.pdf http://people.hbs.edu/mluca/FakeItTillYouMakeIt.pdf [2] https://www.buzzfeed.com/sandraeallen/is-yelp-evil-or-just-misunderstood?utm_term=.uqQwO8dzY#.kvDG6yAEJ https://www.buzzfeed.com/sandraeallen/is-yelp-evil-or-just-m... [3] https://www.yelp.com/extortionmeme https://www.yelp.com/extortionmeme
  - tptacek 10y ago
    Being a public company doesn't mean any lie you tell, even about your business, is criminal.
    - unit91 10y ago
      Whoa. You significantly broadened the scope of my comment from "their post" to "any lie". In this case, the post is about the company's revenue stream (or lack thereof), as it pertains to money-for-better-reviews. If Yelp's claim is false, and they are mounting a marketing campaign to knowingly deceive shareholders and potential shareholders about revenue sources, then yes it would be a criminal act. In fact, digging around a little reveals there has been a class-action lawsuit for a jury trial on these very grounds. [1] Granted, they sited Yelp's 10-K filing with the SEC, but I seriously doubt a jury would say "well, it wasn't on their 10-K, so the blog post is fine." 1. https://www.scribd.com/document/236094666/Curry-v-Yelp https://www.scribd.com/document/236094666/Curry-v-Yelp
yalogin 10y ago
Why has Yelp fallen off like that? It was and still is the leader in reviews but it seems like they are doing nothing to keep it or innovate. They are actively trying to lose it (like trump) but are in the lead because people have no alternative. Do they need new leadership?

64 points by pavornyoh 10y ago

The actual program, hosted by HackerOne: https://hackerone.com/yelp https://hackerone.com/yelp Already paid out $65,160.

innoying 10y ago
It's been private (invite-only) for about 2 years, they went public today.

NegativeLatency 10y ago

Why does the Yelp filter for "Open Now" not default to being turned on. It's so annoying when I'm looking for a place to eat, I have to remember to hit that specific button.

mvd366 10y ago
Not all businesses have their operating hours in Yelp's system. Given that, the choice comes down to either: A) Showing all businesses by default and giving the user the ability to only show restaurants which are definitely open at that time. or B) Hiding all businesses unless someone has supplied their operating hours explicitly. Even when this data has been added, it is not always accurate.
j-bd 10y ago
A lot of people search for businesses at times when many restaurants are closed (e.x. trying to find dinner reservations during the day) Other examples: - Searching for bars during work hours to get drinks at after work - Searching for clothing stores at night whose operating hours at 9-5 - Etc...

deleted 10y ago

[deleted]

foobarcrunch 10y ago

Fuck Yelp and their extortion tactics. Some "engineering PR" cannot make up for their complete lack of integrity, even if corrupt judiciary happens to legitimize it (judges, DAs are also beholden to campaign donors as well). (Legality ∩ mortality ⫉ ∅) http://kitchenette.jezebel.com/a-court-has-ruled-its-totally-cool-for-yelp-to-extort-b-1632255482 http://kitchenette.jezebel.com/a-court-has-ruled-its-totally...

unit91 10y ago
This has been debunked more than a few times, by the way. There's even a Harvard Business School study on the matter. [1] And a decent overview of the situation here: [2]. Yelp has also unequivocally denied the extortion charge [3]. While you might be tempted to dismiss it as propaganda, at least consider that Yelp is a publicly traded company -- i.e., if their post were shown to be a lie, it would be a criminal offense. Disclaimer: no personal stake in Yelp, I just prefer clarity on the issues. [1] http://people.hbs.edu/mluca/FakeItTillYouMakeIt.pdf http://people.hbs.edu/mluca/FakeItTillYouMakeIt.pdf [2] https://www.buzzfeed.com/sandraeallen/is-yelp-evil-or-just-misunderstood?utm_term=.uqQwO8dzY#.kvDG6yAEJ https://www.buzzfeed.com/sandraeallen/is-yelp-evil-or-just-m... [3] https://www.yelp.com/extortionmeme https://www.yelp.com/extortionmeme
- tptacek 10y ago
  Being a public company doesn't mean any lie you tell, even about your business, is criminal.
  - unit91 10y ago
    Whoa. You significantly broadened the scope of my comment from "their post" to "any lie". In this case, the post is about the company's revenue stream (or lack thereof), as it pertains to money-for-better-reviews. If Yelp's claim is false, and they are mounting a marketing campaign to knowingly deceive shareholders and potential shareholders about revenue sources, then yes it would be a criminal act. In fact, digging around a little reveals there has been a class-action lawsuit for a jury trial on these very grounds. [1] Granted, they sited Yelp's 10-K filing with the SEC, but I seriously doubt a jury would say "well, it wasn't on their 10-K, so the blog post is fine." 1. https://www.scribd.com/document/236094666/Curry-v-Yelp https://www.scribd.com/document/236094666/Curry-v-Yelp

yalogin 10y ago

Why has Yelp fallen off like that? It was and still is the leader in reviews but it seems like they are doing nothing to keep it or innovate. They are actively trying to lose it (like trump) but are in the lead because people have no alternative. Do they need new leadership?