Re:Instagram's Million Dollar Bug (2015)
by underwater on Monday December 14, 2020 @07:57PM
(#25425676)
The researcher doesn't have zero knowledge before choosing to work with/for a company. The history of payouts and the perception of the company in the community are meaningful indicators of willingness to pay.
[ Parent
| on HN ]
Re:Instagram's Million Dollar Bug (2015)
by albntomat0 on Monday December 14, 2020 @08:56PM
(#25426127)
A large number of companies keep their bug bounty payouts and reports permanently private, which I feel is a disservice to the community.