4 ms·

> Has anyone been paid for these sorts of bounties by Uber? (Short of the $100,000 extortion payout swept under the rug of bug bounties) They've paid out more

> Has anyone been paid for these sorts of bounties by Uber? (Short of the $100,000 extortion payout swept under the rug of bug bounties) They've paid out more than $1,300,000 in bounties, you can view all their payouts here: https://hackerone.com/uber/hacktivity?sort_type=latest_disclosable_activity_at&filter=type%3Aall%20to%3Auber&page=1&range=forever https://hackerone.com/uber/hacktivity?sort_type=latest_discl... > Do you trust their code contributions on OSS to not contain malicious attack vectors? This has nothing to do with anything.

ineedasername 9y ago
Good to know they aren't actually deadbeats on bugbounties and can chalk up this example to honest disagreement. As for the rest, it has to do with everything. Would you trust your application's security to code libraries written by a company with the the allegations hanging over Uber? If there's a chance your customer data might be a strategic asset for Uber?