Re:Google launches new vulnerability reward platform
by deckar01 on Tuesday July 27, 2021 @12:52PM
(#27974624)
Not work on the bug, just be kept in the loop like the initial reporter. Putting in the same effort as the first reporter should earn you the same trust that is afforded to the first reporter.
Re:Google launches new vulnerability reward platform
by ehsankia on Tuesday July 27, 2021 @01:52PM
(#27975405)
If you're not going to win a prize, why would you need to be kept in the loop about an internal vulnerability that is being worked on?
As for getting a prize, it goes back to the dupe issue which is the source of a lot of abuse. There's no way to prove you also worked on it or if you just got the info from your friend and want to double your winnings.
It makes sense if you're vetting people beforehand to make sure that giving them this level of access and communication is worth the effort, but that's what a job interview is.