sn4pp

I'm sorry, won't do that, don't know why. I'm pretty sure there something like computer abuse act. If you don't follow their rules, how would it be legal to hack on their servers?

Hacking PayPal is a crime tho'.

Except for when you play their game, which means: submit bugs via h1 and only disclose if they allow.

I'm not talking about this case specifically.

At least Paypal was notified before the public disclosure!

> but disclosing bugs publically is an addition to your resume

Request disclosure on hackerone then. Idk, breaking the law to get a job doesn't seem ok to me.

Oh so an N/A dupe? That sounds plausable.

> I would actively, publically, and immediately disclose bugs that affect anybody who is a client of HackerOne.

Sadly you can't feed your children from media drama.

Maybe, in the long run, but it's more likely to get sued.

> They deemed this issue a Duplicate, and we lost another 5 points.

A dupe costs points?! On bugcrowd you GET points for dupes...

"forced telemetry" is very wrong.

Let's see how long it takes until that is illegal in your country.

Just got scammed on one of those smaller sites, f it, I'll buy on amazon so I atleast get anything shipped to me.

Seems to be good for stuff like

api_key="[a-z0-9]+"

Ty