Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Bug Bounty

Options
  • 08-06-2020 5:09pm
    #1
    horgan_p
    Moderators, Education Moderators Posts: 2,604 Mod ✭✭✭✭


    Hey ,

    Anyone here have experience of bug bountys ? I'm in the middle of submitting my first one(s) and getting a bit lost.

    Whats to stop a company taking your report, patching the flaw and then saying "we cant reproduce the issue"

    I know the issue existed because I created a video recreating the issue.

    Just wondering whats the normal procedure here, as I say, I'm new at this.


Comments

  • Options
    #2
    Rodney Bathgate
    Closed Accounts Posts: 3,445 ✭✭✭Rodney Bathgate


    With social media and ability to screenshot or record I doubt any company would be stupid enough to try that.

    I’d be more worried that someone has steady submitted the issue and yours will be closed as a duplicate.


  • Options
    #3
    horgan_p
    Moderators, Education Moderators Posts: 2,604 Mod ✭✭✭✭horgan_p


    Rodney Bathgate wrote: »
    With social media and ability to screenshot or record I doubt any company would be stupid enough to try that.

    I’d be more worried that someone has steady submitted the issue and yours will be closed as a duplicate.

    Do you have experience in this field ?
    If so I've a few more questions


  • Options
    #4
    Rodney Bathgate
    Closed Accounts Posts: 3,445 ✭✭✭Rodney Bathgate


    No, but I work for a software company with open source and non-open source products. We have public JIRA projects and private ones. The lead time from an issue being identified / first reported to a fix being rolled out can be weeks or even months depending on resolution complexity and test cases, so there is a possibility they already are aware of the issue and working on a fix. Rushing out a fix can cause more problems than the original issue.


  • Options
    #5
    horgan_p
    Moderators, Education Moderators Posts: 2,604 Mod ✭✭✭✭horgan_p


    Rodney Bathgate wrote: »
    With social media and ability to screenshot or record I doubt any company would be stupid enough to try that.

    I’d be more worried that someone has steady submitted the issue and yours will be closed as a duplicate.

    Do you have experience in this field ?
    If so I have a few more questions


Advertisement