3 ms·
HackerOne should be getting slated a lot more than they are. They are selling their bug bounty program to their customers (e.g. Valve) as offering the equivale
by rodgerd 7y ago
HackerOne should be getting slated a lot more than they are.
They are selling their bug bounty program to their customers (e.g. Valve) as offering the equivalent control to a traditional pen test contract (with confidentiality) while also trying to sell the spec work/no findings, no pay price advantage of a bug bounty program. It's scummy as hell.
- tptacek 7y agoIf you don't want to participate in bug bounties, don't participate in them. It's not like it's hard out there in 2019 for application pentesters. This is a "world's tiniest violin" argument.
- linza 7y agoIt's still interesting to hear comments like in the GP for an unknowing person like me. Your comment is interesting as well, if only for the defensive reaction without addressing the "being scummy" claim. I'm basically hearing, yeah it's scummy, now get off my lawn.
- rodgerd 7y agoI guess if you don't have an argument, "hurr durr angry pen tester" is what you bring to the party. (I'm not.)