Re:Uber Engineering Bug Bounty: The Treasure Map
by nabaraz on Tuesday March 22, 2016 @02:20PM
(#11338667)
I sent an email to Uber about this. Other companies like facebook, xbox have a way to create test accounts.
Re:Uber Engineering Bug Bounty: The Treasure Map
by Joool on Wednesday March 23, 2016 @02:05AM
(#11342453)
From there hackerone-page:
Do you provide test accounts?
As of this time we do not have a good system for creating test accounts for our bug bounty submitters. Please create an account as you would normally and perform testing with that account.
Something I couldn't see here is that while you ask for bugs related to a variety of accounts, are there ways of creating such accounts? I can fairly easily ensure I don't poke at the normal user account of someone else, but what about drivers/businesses/etc?
More generally for HNers, are there common ways of dealing with this? Do people try and run parallel stacks that don't contain real info? Or do devs setup fake accounts?
I'm not in this business so apologies if I'm missing something really obvious.