4 ms·
How is this different from any other bug bounty program as an incentive to compromise live functionality/user data always exists?
by s_dev 4y ago
How is this different from any other bug bounty program as an incentive to compromise live functionality/user data always exists?
- dymk 4y agoIt’s the difference between stepping in a bear trap and poking a lion.
- mirashii 4y agoWell run bug bounty programs have strict guidelines on what is and is not out of scope, and changes like this would certainly be out of scope (in fact, generally social engineering as part of the exploit chain is itself wholly out of scope).
- nicolas_17 4y agoBug bounty programs usually explicitly forbid accessing other people's data.