3 ms·

Wow, only 5k for this? discord is cheap.

• dannyw 6y ago
  I hope in the coming years, increasing number of researchers publicly publish vulns where companies lowball (or don’t offer bounties at all). Reasoning: as a user I want my apps to be secure. Proportionate bounties do that.
  • Zenbit_UX 6y ago
    How would this play out? Bug bounties take the charity business model, you disclose everything you know, they get to fixing it and when they're done they may inform you that they'll write you a check. Disclosure at this point is moot, you'd only look like an ass and probably wouldn't get the check. What you're describing is more like a darknet marketplace when you describe the vulnerability in the fewest words possible and never giving up code until the Bitcoin deposit is confirmed. I seriously doubt most companies would deal with an individual like this, it's closer to blackmail than it is a bug bounty.
• cannedslime 6y ago
  Yet they will gladly give out 10.000usd for gender reassignment surgery. Apparently having eunuch slaves is better than having a secure product.