[meow]

https://hackerone.com/reports/125200

$3000 for some fucking "information disclosure" shit that's not even anywhere near a vulnerability... I give up

[Oni]

What @Reiko told me sounded better than this, even.

[superMAUS]

I don't know, for a company like Uber the ability for competitors to figure out just how many users they have seems highly valuable. Also 3000 is a small sum for Uber to pay, especially if it incentivizes other bug bounty hunters to focus in on them.

[sleaze]

buddy of mine got $1k just for telling a sysadmin to make someone change their password

[mothered]

buddy of mine got $1k just for telling a sysadmin to make someone change their password

My goodness, perhaps I should start reporting my vulnerabilities.

It'll be nice to retire early from the workforce.

[whatarethechances]

Unbelievable. They get really lucky sometimes.