> Once all steps are complete, we will reimburse you the cost of creating this account.
Seems they'll refund the paid account, still a weird thing to do.
Seems they'll refund the paid account, still a weird thing to do.
Always just publish your research. You can optionally offer it privately to the affected party in advance, but don't agree to any TOSes to do free work.
Full disclosure is responsible, too.
Companies should be trying really hard to avoid this happening by offering better rewards with less hoops to jump through.
For the first few years the company will be considered a level just above common criminals. After a few while, they will be considered an essential consumer protection service.
It’s not something to rely on at all.
In most bug bounty programs I've seen (including Apple's and Facebook's) payouts are contingent on not publishing the research without consent.
That literally sounds like a Nigerian email scam.