3 ms·

No bounty was paid for this, and the average imgur payout is only $100. I feel the bug bounty scene is very crowded and most companies will treat you as an imb

No bounty was paid for this, and the average imgur payout is only $100. I feel the bug bounty scene is very crowded and most companies will treat you as an imbecile.

behringer 3y ago
Absolutely you are if you give them the bug before promise of payment. You're always best off disclosing publicly if they don't want to pay you.
- kramerger 3y ago
  But that's the whole point of a commercial bug bounty program
  - behringer 3y ago
    That's the "if you give them the bug before promise of payment." part of my comment.
CSDude 3y ago
We set a huge disclaimer on previous company with almost 100 items for the things that are not valid for a bug report. The quality of reports received is subpar, but it's still best quality of sources for finding out vulnerabilities. Though it's expensive for me for now.