>Personally I would have gone with the bounty, then shamed Twitter for the (probably) low payout in an effort to promote my brand. The problem is that the atta

>Personally I would have gone with the bounty, then shamed Twitter for the (probably) low payout in an effort to promote my brand. The problem is that the attack requires active social engineering to pull off, so it probably wouldn't have been eligible for a bounty. "I could trick your employees and gain access to user accounts" isn't really covered.