Mastodon Feed
jonny@neuromatch.social ("jonny (nonvenomous)") wrote:
For no particular reason, say you found a vulnerability in a piece of software. This developers of this software claim that a bunch of things that would normally be considered vulnerabilities are actually intended behavior, but this is still beyond that and definitely in their bug bounty list. How would I maximize the likelihood of a bounty payout? I have never submitted one before.