Re:Anyone can access deleted and private repository data on ...
by 93po on Wednesday July 24, 2024 @03:39PM
(#41061045)
companies vary wildly in their honesty and cooperation with bug bounties and develop reputations as a result. if they have a shit reputation, people stop doing free work for them and instead focus on more honest companies
[ Parent
| on HN ]
Re:Anyone can access deleted and private repository data on ...
by account42 on Thursday July 25, 2024 @05:45AM
(#41066701)
Not all free work is wanted. Discouraging frivolous reports is exactly what is being accomplished by not paying for them.
Re:Anyone can access deleted and private repository data on ...
by 93po on Friday July 26, 2024 @08:30AM
(#41078058)
there are endless examples of reports that, by the judgement of the community, are entirely valid and unknown security concerns and fit within the guidelines of a company's bug bounty program, and do not ever result in payment