3 ms·
Money is how we keep score and literally show each other what we value. I think there is a threshold amount that demonstrates that they really care and I would
by asmithmd1 13y ago
Money is how we keep score and literally show each other what we value. I think there is a threshold amount that demonstrates that they really care and I would define that as enough money for a date.
I found a vulnerability with a large regional service I use a couple of years ago and did the right thing by discreetly reporting it. They thanked me and gave me credit for their service equal to about $50; I felt like they really appreciated my report.
If they had given me swag they give away for free I would have been nonplussed.
- PhasmaFelis 13y agoIf you report a bug to a company that has no posted bug-bounty policy, you really shouldn't be expecting anything but a "thank you". If you don't get a thank you, then you have a right to be nonplussed. Anything beyond a thank you (cash, T-shirts, warm hugs) is pure gravy and, IMHO, ought to be appreciated as such. That said, yes, big companies really ought to have official bug bounties. But that doesn't mean you have a right to expect them.