I definitely agree with you on this. The response from the engineer could've been better. Some sort of canned response would have worked.
IMHO, the whole ToS business was a way to give him a slap on the wrist for embarrassing them.
IMHO, the whole ToS business was a way to give him a slap on the wrist for embarrassing them.
My first thought is to say to facebook "Oh, I thought you were interested in fixing bugs. I'll know better what to do next time." Are you forgetting that the purpose of the bounty program is to protect facebook users by discovering and fixing bugs before spammers get the chance to use them? And that spammers pay real money for bugs like this one?
It's an awfully high standard to hold people to, considering the fb ToS is not translated to the guy's native language.