3 ms·
TL;DR: DJI rolled out a bug bounty program from $100-$30,000 but it was vague and poorly executed. Author found AWS keys and subsequent data, to which DJI respo
by ukulele 9y ago
TL;DR: DJI rolled out a bug bounty program from $100-$30,000 but it was vague and poorly executed. Author found AWS keys and subsequent data, to which DJI responded with onerous legal terms and threats. After many weeks of back and forth, author walked away.
- mcguire 9y agoDJI? The drone maker?
- optimuspaul 9y agothanks, I barely made it through page 2 and lost interest very fast after that. Got a bit too "cute" with formatting and style.
- clay_to_n 9y ago> DJI responded with onerous legal terms and threats. And they sent him threats after they offered him the highest ($30,000) bounty, waited a month doing nothing, and then finally sent him a terribly restrictive non-disclosure agreement which he'd have to sign to actually get the cash.