3 ms·
Since around 2021, I've reported privately (with MSRC on copy) a number of Bing infrastructure issues where their internal webpages were misconfigured and expos
by withinrafael 4y ago
Since around 2021, I've reported privately (with MSRC on copy) a number of Bing infrastructure issues where their internal webpages were misconfigured and exposed to the public. I had access at some point to a bunch of their dashboards, content curation tools, build farms, stuff that exposed user search query strings, user logs, etc. I had no idea a bounty program existed and MSRC never responded. The team did fix the issues and seemed appreciative. To see such a different response (and a large cash bounty) is frustrating (to me). Happy it got fixed though!