4 ms·
> a16z did not give me any bug bounty on this because of the fact i publicly reached out instead of trying to reach out privately. I just don't understand this
by localfirst 2y ago
> a16z did not give me any bug bounty on this because of the fact i publicly reached out instead of trying to reach out privately.
I just don't understand this petty attitude. This almost guarantees next time somebody that finds vulnerability with a16z or any of its companies to seek black market rewards that will do far more damage.
This is just like when KakaoTalk refused to payout bug bounty because you had to be a Korean citizen which ended up causing more vulnerabilities to be discovered in the wild.
Companies and billionaires reading this, please don't be petty like Andreesen. Guy went from a leader to a borderline security fraud artist. You don't want to be earning more ire from the public in the current political climate. It's dangerous.