>they've just upheld a policy which says that they won't pay anyone who doesn't play by the rules. Quite fair, in my opinion. My first thought is to say to fac

>they've just upheld a policy which says that they won't pay anyone who doesn't play by the rules. Quite fair, in my opinion. My first thought is to say to facebook "Oh, I thought you were interested in fixing bugs. I'll know better what to do next time." Are you forgetting that the purpose of the bounty program is to protect facebook users by discovering and fixing bugs before spammers get the chance to use them? And that spammers pay real money for bugs like this one? It's an awfully high standard to hold people to, considering the fb ToS is not translated to the guy's native language.