4 ms·
Hackerone is a joke, anyway. Organizations will just respond with "it's a feature, not a bug" to get out of any bounty. I once reported that you could log on to
by kaetemi 5y ago
Hackerone is a joke, anyway. Organizations will just respond with "it's a feature, not a bug" to get out of any bounty. I once reported that you could log on to certain PP accounts with just username and CC number, bypassing configured 2FA, and allowing to wipe the 2FA. Guess the response. Lo and behold, it's fixed now.
- throwoutway 5y agoHackerone should be an escrow that can arbitrate and overrule insipid behavior like that. But they won’t, will they? Maybe someone else will fill that void