A Bug in the Bug Bounty

Re:A Bug in the Bug Bounty by veszig on Tuesday December 03, 2013 @06:48PM (#6844061)

"To improve the program from now on we will reward bug hunters who find bugs outside of the scope provided that they do not violate our users’ information and that their report triggers us to improve our code base. We will also retroactively check to see if other reports found issues that fall into this category."

This means Shubham will get the bounty.

[ Parent | on HN ]

Re:A Bug in the Bug Bounty by MrZongle2 on Tuesday December 03, 2013 @06:57PM (#6844089)

I don't know about that: "from now on" seems to imply that in the future that will be the case.

[ Parent | on HN ]

Re:A Bug in the Bug Bounty by eridius on Tuesday December 03, 2013 @07:29PM (#6844231)

Check the end of the quote, it says "retroactively".

[ Parent | on HN ]

Re:A Bug in the Bug Bounty by kibibu on Tuesday December 03, 2013 @08:09PM (#6844389)

Also: "and that their report triggers us to improve our code base".

Closing port 8001 isn't quite improving the code base.

[ Parent | on HN ]

Re:A Bug in the Bug Bounty by cloverich on Tuesday December 03, 2013 @10:48PM (#6844922)

But combing source code repositories for config files containing private information might be.

[ Parent | on HN ]

Re:A Bug in the Bug Bounty by veszig on Tuesday December 03, 2013 @06:58PM (#6844095)

retroactively.

[ Parent | on HN ]