6 ms·
> Without feedback you don't know that the bug was fixed in reaction to your bug report. In this particular case, they did say they will consider a reward for
by leftcenterright 1y ago
> Without feedback you don't know that the bug was fixed in reaction to your bug report.
In this particular case, they did say they will consider a reward for a severe bug (it was severe, DNS hijack) and then once I shared details, the next day I checked, they had fixed it and never wrote back.
- cinntaile 1y agoNext time you find a bug there you sell it to the highest bidder. Or maybe not you, but someone will do that. It's not really a winning strategy... I did not know bug bounty had such a bad rep. Is this for reporting bugs outside of the bug bounty platforms?
- leftcenterright 1y ago> Is this for reporting bugs outside of the bug bounty platforms? Nah, in this case they simply had no official bug bounty program/platform. I would guess that a big factor is mindset and tech culture across different companies or having a bad head of something who doesn't get the point of bug bounty / promoting responsible disclosure.