Hacker News Reader

Great blog post. The company response was really great, but there was no mention of a bug bounty. This would be a perfect example if he got paid for his findings.

View on HN

I'm not male and I use gender neutral pronouns.

The bugs I find are usually just ones I stumble across, I don't go looking for them.

Bug bounty programs generally aren't worth the trouble for me anyway - I have to file taxes in both the US and the UK so the paperwork gets really annoying.

I wanted to see your talk on Hacking Gender, but the link on your about page is broken, it seems to have been taken down :(

I've fixed the link.

The link had been to an unofficial upload. I guess the uploader took it down after EMF's official version was posted.

Adding to Ryan's concerns, submitting to a bug bounty program often means accepting terms and conditions that constrain your ability to publicly disclose the issue if the vendor decides to be a dick about it. Depending on how you think your career potentially benefits from freedom to discuss an issue, the long-term financial benefit is potentially greater from not going down the bug bounty path.

Oh, yeah, I'd forgotten about the NDAs, those are a big NOPE for me.

Reply on news.ycombinator.com