2 ms·
Tfa specifically excludes security bounties because there are often multiple security bugs, it's a discovery bounty and not a "compete for this one thing" scena
by throwawaymaths 3y ago
Tfa specifically excludes security bounties because there are often multiple security bugs, it's a discovery bounty and not a "compete for this one thing" scenario.
- bawolff 3y agoWell i agree with them but for different reasons. I also disagree about duplicates being a non issue in security bounties though. Its super common for multiple people to find the same bug. Even worse, security bugs are often kept secret so you dont know that someone has you just have to trust the project that it really is a dupe. Its one of the main reasons why sec bug bounties are unfair to researchers imo.