5 ms·

Sending an email to security@google.com will result in a quick response. As part of their bug bounty program Google would have paid $1,000 for this bug if not m

Sending an email to security@google.com will result in a quick response. As part of their bug bounty program Google would have paid $1,000 for this bug if not more.

aristus 15y ago
The biggest problem when the 911 (and equivalent emergency services) was getting the word out there that it existed. It required a huge, years-long marketing campaign. Perhaps they should have inhouse ads targeted at keywords like "report vulnerability".
- shadowfox 15y ago
  I wonder if large companies are willing to advertise to the general public the possibility that they could have vulnerabilities.
elmomalmo 15y ago
Hmm, which is more valuable, $1000 or #1 on HN?
- mike-cardwell 15y ago
  $1000
- TeMPOraL 15y ago
  Sometimes (not necessarily in this case) #1 on HN. Being noticed in the right place at a right time may proove to be much better for one's life than a quick money boost.
- StavrosK 15y ago
  You can get both.
mike-cardwell 15y ago
That was my immediate thought when I read the article. "Wow, this guy just chucked away hundreds of dollars". Always check for a bounty program before you go and release information like this.
- jc123 15y ago
  Google should probably still give this guy the bounty
  - mike-cardwell 15y ago
    One of the main reasons they have a bounty program is to prevent people releasing information about bugs before they have been fixed. I don't see why they should give him a bounty.
dave1010uk 15y ago
I emailed security@google.com when I found a security issue with Google +1 (http://news.ycombinator.com/item?id=2630355 http://news.ycombinator.com/item?id=2630355) but didn't get any response. I guess it's not really an issue for them.
silverbax88 15y ago
No, it won't. Trying to contact Google when I was working for a major corporation and TRYING TO GIVE GOOGLE MONEY resulted in the exact same issue as the OP, and this was in 2006, not 2011. The only way to get their attention was create a blog post about how I couldn't contact them.

Sending an email to security@google.com will result in a quick response. As part of their bug bounty program Google would have paid $1,000 for this bug if not more.

aristus 15y ago

The biggest problem when the 911 (and equivalent emergency services) was getting the word out there that it existed. It required a huge, years-long marketing campaign. Perhaps they should have inhouse ads targeted at keywords like "report vulnerability".

shadowfox 15y ago
I wonder if large companies are willing to advertise to the general public the possibility that they could have vulnerabilities.

elmomalmo 15y ago

Hmm, which is more valuable, $1000 or #1 on HN?

mike-cardwell 15y ago
$1000
TeMPOraL 15y ago
Sometimes (not necessarily in this case) #1 on HN. Being noticed in the right place at a right time may proove to be much better for one's life than a quick money boost.
StavrosK 15y ago
You can get both.

mike-cardwell 15y ago

That was my immediate thought when I read the article. "Wow, this guy just chucked away hundreds of dollars". Always check for a bounty program before you go and release information like this.

jc123 15y ago
Google should probably still give this guy the bounty
- mike-cardwell 15y ago
  One of the main reasons they have a bounty program is to prevent people releasing information about bugs before they have been fixed. I don't see why they should give him a bounty.

dave1010uk 15y ago

I emailed security@google.com when I found a security issue with Google +1 (http://news.ycombinator.com/item?id=2630355 http://news.ycombinator.com/item?id=2630355) but didn't get any response. I guess it's not really an issue for them.

silverbax88 15y ago

No, it won't. Trying to contact Google when I was working for a major corporation and TRYING TO GIVE GOOGLE MONEY resulted in the exact same issue as the OP, and this was in 2006, not 2011. The only way to get their attention was create a blog post about how I couldn't contact them.