3 ms·
Hackerone (where cURL hosted their bounty program) tracks the reputation of bounty hunters. I don't understand why they are not taking advantage of this. Make a
by memesarecool 9mo ago
Hackerone (where cURL hosted their bounty program) tracks the reputation of bounty hunters. I don't understand why they are not taking advantage of this. Make a private program, invite only hackers who have proved themselves by submitting relevant reports.
- spiffyk 9mo agoSay all projects did just that, only allowing reports from proven hackers. How does a new hacker then prove themselves?
- sillywabbit 9mo agoStart a lemonade stand?
- GuinansEyebrows 9mo agoi think that hypothetical is too simplistic to accurately frame the situation. we're talking about one of the largest, most widely used libraries in the open source world. at that level, they don't really need unknowns to use their project to "prove themselves" - they can contribute to smaller projects or put their own work out into the world.
- GeorgeOldfield 9mo agofind bugs for free at first. implement negative reputation for BS bugs
- empath75 9mo agohttps://daniel.haxx.se/blog/2025/07/14/death-by-a-thousand-slops/ https://daniel.haxx.se/blog/2025/07/14/death-by-a-thousand-s... most of them are new users or will just create a new account if their reputation gets hit.