News for hackers. Stuff that matters.
Re:Uber Engineering Bug Bounty: The Treasure Map by IanCal on Tuesday March 22, 2016 @02:09PM (#11338579)
Having descriptions of all the various services is great.

Something I couldn't see here is that while you ask for bugs related to a variety of accounts, are there ways of creating such accounts? I can fairly easily ensure I don't poke at the normal user account of someone else, but what about drivers/businesses/etc?

More generally for HNers, are there common ways of dealing with this? Do people try and run parallel stacks that don't contain real info? Or do devs setup fake accounts?

I'm not in this business so apologies if I'm missing something really obvious.

Re:Uber Engineering Bug Bounty: The Treasure Map by nabaraz on Tuesday March 22, 2016 @02:20PM (#11338667)
I sent an email to Uber about this. Other companies like facebook, xbox have a way to create test accounts.
Re:Uber Engineering Bug Bounty: The Treasure Map by Joool on Wednesday March 23, 2016 @02:05AM (#11342453)
From there hackerone-page:

Do you provide test accounts?

As of this time we do not have a good system for creating test accounts for our bug bounty submitters. Please create an account as you would normally and perform testing with that account.

https://hackerone.com/uber