News for hackers. Stuff that matters.

A comment on A Bug in the Bug Bounty.

Re:A Bug in the Bug Bounty by fowkswe on Tuesday December 03, 2013 @09:26PM (#6844601)
Why don't you just pay him for the service he provided you? Is your bounty that high that you can't afford to?

It seems the negative publicity you are getting is going to cost you more..

[ Parent | on HN ]
Re:A Bug in the Bug Bounty by jdbernard on Wednesday December 04, 2013 @12:08AM (#6845143)
It seems reasonable to assume that they will pay him:

To improve the program from now on we will reward bug hunters who find bugs outside of the scope provided [...] We will also retroactively check to see if other reports found issues that fall into this category.

[ Parent | on HN ]