3 ms·
I know that Indian companies might not have a bug bounty program but you should get paid for finding such a big vulnerability And their CTO should take some bla
by yas_hmaheshwari 2y ago
I know that Indian companies might not have a bug bounty program but you should get paid for finding such a big vulnerability
And their CTO should take some blame for this.
On the other hand, I agree with other comments that posting the whole financials of a company does not seem like a good idea
PS: I really like your writing style. Subscribed your newsletter
- Wytwwww 2y ago> I agree with other comments that posting the whole financials of a company does not seem like a good idea Probably. But IMHO it's the right/moral thing to do, posting/showing how to access their client data is of course hardly justifiable.