Hacker News Reader

This isn't encouraging ignorance, it's encouraging good faith, (which is a large part of the entire purpose behind security bounties) and has undoubtedly been an learning experience for the gentleman involved.

View on HN

Yes, I heard he is going to black market next. That's a good lesson I think.

Nowhere I saw good faith, just greed for money. He was even asking for money in the initial bug "reports". http://4.bp.blogspot.com/-4LbrTjyKBXc/Ug5sokeeR0I/AAAAAAAAAJ...

Don't confuse altruism with good faith. He was obviously not being altruistic - he wanted to be compensated for the vulnerability he had found - but he was not being malicious in his TOS-violating behaviors. There was no intent to cause damage, to exploit the bug for personal gain, or to otherwise be a bad actor. That is what "acting in good faith" means; the things he did were benign and intended to bring the issue to Facebook's attention. The fact that he wanted to be compensated for his discovery doesn't diminish that.

Reply on news.ycombinator.com