I wonder how in-scope this would be for bug bounty programs. Getting a dev's-eye view into an application would be invaluable for determining attack vectors, an

I wonder how in-scope this would be for bug bounty programs. Getting a dev's-eye view into an application would be invaluable for determining attack vectors, and there's also snooping kanban boards for low-priority bugs and slack for lazy cred sharing. If I didn't live out in the sticks (and had done research to make sure it would be legal) I'd give it a go.