On: Hacking Github with Webkit

[Oompa]

Just because a bounty policy isn't disclosed doesn't mean it doesn't exist.

[haileys → Oompa]

I've reported several vulnerabilities to GitHub. There is no bounty policy.

[homakov → haileys]

yeah +1. @joernchen also did I remember. And lots of other people.

Hey, anyone, is github that super profitable company with 100mln investments ? They got no money or what?

[beaumartinez → homakov]

I guess people disclose enough vulns voluntarily that they don't need to offer a bounty as an incentive.

[homakov → beaumartinez]

= cheating

[homakov → Oompa]

trust me, it doesn't exist.

[mofle → Oompa]

I got a t-shirt some time back for reporting a serious XSS vulnerability.

[homakov → mofle]

they like you.