5 ms·

Beware of the chilling effects of collecting Google bounties, they will claim a reward is invalid if you've blogged about the vuln outside of their timetable.

• innoying 13y ago
  Isn't that common sense? If you disclose the bug publicly before it's patched you won't get the reward...
  • midas007 13y ago
    Sort of. But Google has a history of how it treats independent researchers.