I Got Paid $0 from the Uber Security Bug Bounty

Re:I Got Paid $0 from the Uber Security Bug Bounty by arkadiyt on Sunday December 24, 2017 @04:22PM (#16001358)

> Has anyone been paid for these sorts of bounties by Uber? (Short of the $100,000 extortion payout swept under the rug of bug bounties)

They've paid out more than $1,300,000 in bounties, you can view all their payouts here: https://hackerone.com/uber/hacktivity?sort_type=latest_discl...

> Do you trust their code contributions on OSS to not contain malicious attack vectors?

This has nothing to do with anything.

[ Parent | on HN ]

Re:I Got Paid $0 from the Uber Security Bug Bounty by ineedasername on Sunday December 24, 2017 @05:56PM (#16001743)

Good to know they aren't actually deadbeats on bugbounties and can chalk up this example to honest disagreement.

As for the rest, it has to do with everything. Would you trust your application's security to code libraries written by a company with the the allegations hanging over Uber? If there's a chance your customer data might be a strategic asset for Uber?

[ Parent | on HN ]