3 ms·
$2000 is an absurdly small bounty here - you should up that
by exdsq 2y ago
$2000 is an absurdly small bounty here - you should up that
- radicaldreamer 2y ago50k or 100k would be far more appropriate given the severity of this issue. But overall, this makes me think there's probably a lot more vulnerabilities in Arc that are undiscovered/unpatched. Also, there's the whole notion of every URL you visit being sent to Firebase -- were these logged? Awful for a browser.
- deleted 2y ago[deleted]
- ha470 2y agoYa this is fair! Honestly this was our first bounty ever awarded and we could have been more thoughtful. We’re currently setting up a proper program and based on that rubric will adjust accordingly.
- karlzt 2y ago$200k for this big bug.
- karlzt 2y agoMy comment has been downvoted twice, but I don't see it grayed out, I wonder why.
- ARandomerDude 2y ago> Honestly this was our first bounty ever awarded and we could have been more thoughtful That’s corporate speak for “no, we won’t pay the researcher any more money.”