4 ms·

If this vulnerability can fit those 4 categories, what kind of vulnerability would you be confident would qualify for the bounty?

• jsjohnst 8y ago
  That’s the problem, I feel their exclusions from bounty are too wide. This vulnerability if confirmed should be eligible for some bounty imho. That said, they published the exclusions publicly, so getting butt hurt over not getting paid when they said you wouldn’t feels a bit petty to me.
  • daveFNbuck 8y ago
    Why do you say he's butt hurt? He doesn't even mention not getting paid. The post is about Keybase not taking a security vulnerability seriously. Is it petty to warn people about an insecure product?
    • jsjohnst 8y ago
      > Why do you say he's butt hurt? I didn’t. It was a generalized statement about the bounty terms, not directed at any one person.