3 ms·

I've reported several vulnerabilities to GitHub. There is no bounty policy.

• homakov 14y ago
  yeah +1. @joernchen also did I remember. And lots of other people. Hey, anyone, is github that super profitable company with 100mln investments ? They got no money or what?
  • beaumartinez 14y ago
    I guess people disclose enough vulns voluntarily that they don't need to offer a bounty as an incentive.
    • homakov 14y ago
      = cheating