On: cURL stopped HackerOne bug bounty program due to excessive slop reports

[latexr]

> Sites like HackerOne have a triage team that's supposed to filter through the garbage, before it gets to program management.

Daniel Stenberg, leader and BDFL of the cURL project, has been in contact with HackerOne for at least several months to resolve the situation. It was fruitless. Daniel’s social media posts and blog make that clear.

> Companies will do everything in their power to not pay you, including changing the back-end code or just stating it doesn't have any impact on business.

That doesn’t apply to cURL at all.

[billy99k → latexr]

That's why I said 'supposed to'. It's obviously not working.

"That doesn’t apply to cURL at all"

I never said it did. My point is that companies are struggling with slop reports as much as researchers not getting paid.