4 ms·
It wasn't a bug bounty submission. He used the bug bounty program as a slush fund to pay off criminals so they wouldn't disclose that Uber customers personal da
by mike_d 6y ago
It wasn't a bug bounty submission. He used the bug bounty program as a slush fund to pay off criminals so they wouldn't disclose that Uber customers personal data had been stolen.
- hn_throwaway_99 6y agoExactly. The 'it was a bug bounty' defense is completely laughable. If anything, allowing these types of hush money payments would be more dangerous to the concept of bug bounty programs because the public would lose faith they would be adequately notified of data breaches. Plus, I think the messaging between Sullivan and Kalanick more than proves mens rea. It's possible Sullivan does have a "it was someone else's decision" argument, but not that everybody at Uber thought that what they were doing was above board.