Hacker News Reader

No bounty was paid for this, and the average imgur payout is only $100.

I feel the bug bounty scene is very crowded and most companies will treat you as an imbecile.

We set a huge disclaimer on previous company with almost 100 items for the things that are not valid for a bug report. The quality of reports received is subpar, but it's still best quality of sources for finding out vulnerabilities. Though it's expensive for me for now.

Absolutely you are if you give them the bug before promise of payment. You're always best off disclosing publicly if they don't want to pay you.

But that's the whole point of a commercial bug bounty program

That's the "if you give them the bug before promise of payment." part of my comment.

Reply on news.ycombinator.com