anshuman_bh

3 ms·

1. 1.▲
   by anshuman_bh 12y ago

   considering the fact that they were unresponsive and dismissive and some feedback about slacks bug bounty program from other fellow researchers, I really didn't think 180 days was worth the wait so yeah I chose my own. I am at the libe
2. 2.▲
   by anshuman_bh 12y ago

   Regarding point 4 above, the entire conversation can be found here - https://docs.google.com/document/d/1q-aKtxS6xNIhal0As743tBE1... So, I report a bug that I think is a security vulnerability. You fail to even un
3. 3.▲
   by anshuman_bh 12y ago

   I definitely got a very bad attitude from them. I was really trying to be nice and report bugs with detailed reports including detailed PoC videos demonstrating everything. But, it was disappointing to see their responses honestly.
4. 4.▲
   by anshuman_bh 12y ago

   I think HackerOne as a platform failed here as well. I understand they try to leave themselves out as much as they can and just collect the fees for the bounties paid. But, in cases like this, I feel they should have been a little more proa
5. 5.▲
   by anshuman_bh 12y ago

   Thanks. It is good to know that such programs exist as well.
6. 6.▲
   by anshuman_bh 12y ago

   Exactly. Their word is as good as mine, right? This is the biggest problem I see in bug bounty programs. You are at the mercy of the program.
7. 7.▲
   by anshuman_bh 12y ago

   I was banned from reporting any bugs to the Slack Bug Bounty program on the HackerOne platform after reporting the 3rd bug. What's worse is that I wasn't even notified of this? Even HackerOne didn't think it was necessary to