Bug bounties are a joke
it's the same run-around:
they tell you it's a feature or 'supposed to be that way' and then when abused fix it and you get no pay
or they give low-ball offers and or delay payment ,etc. with very onerous TOS
they tell you it's a feature or 'supposed to be that way' and then when abused fix it and you get no pay
or they give low-ball offers and or delay payment ,etc. with very onerous TOS
- talking about your particular bad experiences
- a theory about why some companies are better than others
- what companies should do to improve their bounties
- data showing that bounty payouts are cheap compared to breaches