News for hackers. Stuff that matters.
Re:cURL removes bug bounties by gamer191 on Wednesday January 21, 2026 @02:18AM (#46702170)
Agreed, although the reimbursement should be based on whether a reasonable person could consider that to be a vulnerability. Often it’s tricky for outsiders to tell whether a behaviour is expected or a vulnerability
Re:cURL removes bug bounties by dlcarrier on Wednesday January 21, 2026 @04:13AM (#46703047)
Yeah, the reimbursement would need to be for a good-faith submission worth considering, even if it wasn't actionable.