Full Disclosure: Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50

[Justin Ferguson <jf () ownco net>]

not that its a fair payout, but for the sake of accuracy, wasnt this
actually $12.50 per XSS? Of those he turned in, how many were
legitimate threats? I haven't paid any attention to it-- bug bounties
are not economically viable for a person to make a living on
irrelevant of the payout.

On Wed, Oct 2, 2013 at 11:32 AM, Ian Hayes <cthulhucalling () gmail com> wrote:
> On Wed, Oct 2, 2013 at 8:20 AM, Jordon Bedwell <envygeeks () gmail com> wrote:
> > On Wed, Oct 2, 2013 at 10:19 AM, Ian Hayes <cthulhucalling () gmail com>
> > wrote:
> > > Paint it for us, o wise philosopher.
> > Figure it out, I'm not your mother, I'm not here to teach you how humans
> > behave.
>
> Sounds like someone has an overdeveloped sense of self-entitlement.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/