[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Serious Yahoo bug discovered. Researchers rewarded with $12.50



not that its a fair payout, but for the sake of accuracy, wasnt this
actually $12.50 per XSS? Of those he turned in, how many were
legitimate threats? I haven't paid any attention to it-- bug bounties
are not economically viable for a person to make a living on
irrelevant of the payout.

On Wed, Oct 2, 2013 at 11:32 AM, Ian Hayes <cthulhucalling@xxxxxxxxx> wrote:
>
>
>
> On Wed, Oct 2, 2013 at 8:20 AM, Jordon Bedwell <envygeeks@xxxxxxxxx> wrote:
>>
>> On Wed, Oct 2, 2013 at 10:19 AM, Ian Hayes <cthulhucalling@xxxxxxxxx>
>> wrote:
>> > Paint it for us, o wise philosopher.
>>
>> Figure it out, I'm not your mother, I'm not here to teach you how humans
>> behave.
>
>
> Sounds like someone has an overdeveloped sense of self-entitlement.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/