Re:I Got Paid $0 from the Uber Security Bug Bounty
by thriftwy on Sunday December 24, 2017 @04:54PM
(#16001483)
Are you familiar with the freelancers' concept of "fuck you, pay me"?
I guess, that's how the first part works. There are things you can try, and there are other things. Messing with freelance pen testers is clearly one of latter.
Re:I Got Paid $0 from the Uber Security Bug Bounty
by jacquesm on Sunday December 24, 2017 @05:18PM
(#16001599)
Given the nature of the game I'd say that's a mild response. On a scale of 0 to 10 that would rate a 3 or so. If there is one group I'd really avoid pissing off it would be pentesters.
Re:I Got Paid $0 from the Uber Security Bug Bounty
by jwildeboer on Monday December 25, 2017 @02:41PM
(#16005414)
The freelancers „fuck you, pay me“ is based on very clear contracts and respectful communication, even when things go bad. This is not what’s happening here AFAICS.
Re:I Got Paid $0 from the Uber Security Bug Bounty
by thriftwy on Monday December 25, 2017 @05:04PM
(#16005920)
"Minimum payout of $500" sounds like a very clear contract.
Once they have shadowbanned the author, IMO, any attempt at respectfulness is violated by bug bounty organizers.
Maybe there are things more rude than shadowban, but I'm not aware of such.
Re:I Got Paid $0 from the Uber Security Bug Bounty
by jxf on Tuesday December 26, 2017 @12:40AM
(#16007312)
The minimum payout is subject to various conditions — for example, not being a duplicate. The author did not meet those conditions, and resorted to personal attacks instead of keeping things professional.
Uber has many, many problems as a company, but on this matter I can't say they're in the wrong.
> So these tickets get assigned to Rob Fletcher with Uber’s security team.
Unfortunately, at least for me, this comes off as public shaming.