Is Facebook Bug Bounty Bogus? • Hacker News Board

Re: Is Facebook Bug Bounty Bogus?

#11

Post by chr13 » Thu, Oct 24, 2013, 4:49 AM UTC

collingreene wrote: post #9

chr13 wrote: post #8

Earlier quoted context omitted.

I think the report number is 173358208.

Cool, found it. Will respond in the email thread.

Thanks for the reply, that clears things up.

Re: Is Facebook Bug Bounty Bogus?

#12

Post by stevoo » Thu, Oct 24, 2013, 10:18 AM UTC

chr13 wrote: post #11

collingreene wrote: post #9

Earlier quoted context omitted.

Cool, found it. Will respond in the email thread.

Thanks for the reply, that clears things up.

for you yes ... for us no ! Can we know why you got no reply and no reward !

Re: Is Facebook Bug Bounty Bogus?

#13

Post by chr13 » Thu, Oct 24, 2013, 12:53 PM UTC

stevoo wrote: post #12

chr13 wrote: post #11

Earlier quoted context omitted.

Thanks for the reply, that clears things up.

for you yes ... for us no ! Can we know why you got no reply and no reward !

This is the excerpt from the reply

"Sorry it took a while to respond. It took us longer than normal because we have had a few weeks of higher than average volume and this ticket was marked as fixed but we hadn't corresponded back to you yet."

"This was indeed fixed by a separate diff that had been committed but was not yet live when you submitted the issue. So in this case we didn't learn about a new issue but we did double-check some of our assumptions around this stuff."

And I got a reward of $500. Here is the POC http://www.youtube.com/watch?v=x5HXv7nPgYo