3 ms·
Bug bounties are ridiculous. If you disclose in an “irresponsible” way you’d get shamed here on HN, and yet we almost never talk about how pitiful the rewards a
by rapind 6y ago
Bug bounties are ridiculous. If you disclose in an “irresponsible” way you’d get shamed here on HN, and yet we almost never talk about how pitiful the rewards are for “responsible” disclosure (maybe nothing or even legal trouble!).
- SquareWheel 6y agoThe bounties can actually be rather good. This one just seems disproportionately low.
- iratewizard 6y ago> yet we almost never talk about how pitiful the rewards are We almost always talk about how pitiful the rewards are, every time someone discloses a pitiful reward. Your post is doing exactly that.
- xvector 6y agoHonestly, I’m all for irresponsible disclosure if corporations pay irresponsibly low bounties. We need to disabuse corporations of the idea that they deserve responsible disclosure when they pay paltry sums for serious bugs.