Me: reports vulnerability that can be used to steal thousands of dollars from a company.

Stingy company: gives me 66 USD voucher as a reward. :)

Free food is good food

So what will you do next time you detect a vuln?

@asgs goes to the highest bidder.

I don't think they should be called stingy for giving a reward, no matter what it is.

As a developer I wouldn't want a bug report from a user just because they gain something out of it... I'd want them to feel as though they were giving something back to the thing I created or helped to create.

how much food do you get for US$ 66?

@asgs use it for myself and try to cover up my tracks, companies dont deserve reporting it to them. I expected at least 200 USD for such a serious bug

@AymanH yes officer, this thread right here

@rutee07 i thought that was standard procedure for such a situation too. 🤷🏻‍♂️, i mean i wouldn’t have gone coz i love my job but not getting the offer...

@stop 2 fancy meals or up to 6 cheap ones

@AymanH two fancy meals for $66. Damn that’s cheep

@AymanH attaboy