Re:I Got Paid $0 from the Uber Security Bug Bounty
by chris_wot on Sunday December 24, 2017 @04:32PM
(#16001392)
Irrelevant. If he found these bugs, even if he’s been a dick about it then he still found a bunch of vulnerabilities that Uber was exposed to. Pay the man, it’s a few thousand dollars as opposed to a major exploit!
[ Parent
| on HN ]
Re:I Got Paid $0 from the Uber Security Bug Bounty
by EnFinlay on Sunday December 24, 2017 @05:42PM
(#16001703)
But that's my point. Of course he deserved a payout if he reported a previously unknown vulnerability. What I'm saying is that he (appears to have) behaved in such toxic way (sow) that someone denied something he deserved (reap). All parties in this are squishy humans with emotions.
No one looks good - he doesn't look good for how he behaved/communicationed, Uber doesn't look good for denying the payout on a valid report, and Hackerone doesn't look good for not enforcing a minimum payout on a valid report.
Re:I Got Paid $0 from the Uber Security Bug Bounty
by lordlimecat on Tuesday December 26, 2017 @12:02AM
(#16007168)
Just because you violate social mores does not entitle someone to violate the terms of their engagement with you.