Re:Apple to contribute to U.S. teen's education for spotting...
by thaumasiotes on Friday February 08, 2019 @06:55PM
(#19119740)
Many companies have a public-facing bug bounty system.
It's incredibly rare for a company to have an objective bug bounty system. I would estimate that the number of companies like this is zero. (Source: I have worked triaging reports to public bug bounty systems for large companies that you've heard of. Payouts can differ by thousands of dollars based on factors like your prior history reporting to the program, what the triager chose to put in their report (even if your two reports are identical), or the label you put on the vulnerability you're reporting.)
It's incredibly rare for a company to have an objective bug bounty system. I would estimate that the number of companies like this is zero. (Source: I have worked triaging reports to public bug bounty systems for large companies that you've heard of. Payouts can differ by thousands of dollars based on factors like your prior history reporting to the program, what the triager chose to put in their report (even if your two reports are identical), or the label you put on the vulnerability you're reporting.)