4 ms·
I never really liked Chegg. They had a major security breach a couple of years ago and either because it's good PR or forced to, now have a bug bounty program.
by johnny99k 3y ago
I never really liked Chegg. They had a major security breach a couple of years ago and either because it's good PR or forced to, now have a bug bounty program.
I found many vulnerabilities in one of their recent acquisitions and although I was paid, they indicated that they won't fix any of them.
- Our_Benefactors 3y ago> I found many vulnerabilities in one of their recent acquisitions and although I was paid, they indicated that they won't fix any of them. That’s interesting to hear they don’t plan to fix them. I wonder if the bug bounty exists as some sort of insurance discount for having a program at all, even if they fix nothing?
- yieldcrv 3y agoBecause the priority is selling shares
- germinalphrase 3y agoMarketing budget.
- newsclues 3y agoSo can other people get paid for discovering and informing them of the same vulnerabilities? What % of the payment would you like to disclose them to me?
- johnny99k 3y agono. They are already disclosed and will result in a duplicate finding/no money