I'm quoted in the article, so I feel I should point out I didn't coordinate w/ Latacora, and am speaking for myself only and I largely agree with most of what T

I'm quoted in the article, so I feel I should point out I didn't coordinate w/ Latacora, and am speaking for myself only and I largely agree with most of what Thomas says here. To summarize, my argument is: - Bug bounties are a waste of time and money for most startups, because you will drown in nonsense scanner findings. - There is a straightforward explanation in which HackerOne benefits from that dynamic, and their business model incentivizes them to make that dynamic worse, not better.