4 ms·
As a security researcher and someone who regularly participates in bug bounties, thank you. You didn't have to do what you did, but you did it anyway, just to
by daeken 13y ago
As a security researcher and someone who regularly participates in bug bounties, thank you. You didn't have to do what you did, but you did it anyway, just to be nice; that should be applauded, not criticized.
Remember everyone: if there's no bounty program in place, reporting bugs means that your expected value for those bugs is $0. If you get more than that, that's awesome, but don't expect it, or act like it's deserved; it's not. Enjoy your Yahoo swag and go on with life.
- tomjen3 13y agoI am fine with getting nothing, but I will get angry if you insult me after I just helped you. And telling me my skills are worth less than minimum wage (assuming it took more than 3 hours to find the bug _is insulting_).
- daeken 13y agoThis is asinine. You ask your friends to help you move, and they happily agree -- they're your friends, right? So they come over, they help you move for 5 or 6 hours. Once it's completed, you get some beer and pizza for everyone. The nominal value of those items is what, $5-6 per person? Holy crap, you just told your friend that their time is only worth $1/hr! Yahoo didn't agree to give you money, didn't hire you to test, and didn't even say "hey, can you take a look at this?". It's completely irrational to then say that a gift that they provided you is an insult. In fact, I'll go further: it reflects very poorly on your own character, and not theirs.
- x3c 13y agoI spent 10 minutes reading your comment, parsing it and then responding to it. You owe me $5.
- chris_wot 13y agoYou spent 10 minutes reading that comment before you understood it?!?
- aaron695 13y agoI'm guessing you're trolling for comments on the overjustification offect - http://en.wikipedia.org/wiki/Overjustification_effect http://en.wikipedia.org/wiki/Overjustification_effect