undefined | Better HN

0 pointsRadle12y ago0 comments

We are not talking about being bad at English we are talking about being difficult to understand.

Facebook gives 500$ per Bug reported, which ends up in a lot of Fail reports if somebody like this gets send:

"Rhe vulnerability allow’s facebook users to share posts to non friends facebook users , i made a post to sarah.goodin timeline and i got success post … of course you may cant see the link because sarah’s timeline friends posts shares only with her friends , you need to be a friend of her to see that post or you can use your own authority ."

You might mistake it for.

"You can post something on a friends page and you can't see it if you aren't friend with that person"

0 comments

sgift12y ago

I could perfectly understand it and English isn't my first language either. This is just Facebook weaseling themselves out of their promise by using bogus arguments. Besides that: If you do not understand a bug report for a security problem you ask for a clarification. That's what professionals do.

borplk12y ago

Facebook couldn't care less about the amount of bounty paid.

That amount for Facebook is practically like a chocolate bar.

They do not want to pay him because he exploited the bug he found two different times, once on the CEO's profile which has resulted in a very significant and negative PR for Facebook.

Facebook will not say "Thanks for creating shitty PR for our brand and damaging our reputation, here have this money"

sgift12y ago

Sure, but the PR will be far more shitty if the reaction of the next hacker is "Sorry, I could have told you about this bug, but I have heard that you don't honor your bounty agreements, so I have sold it to others - Have fun!"

1 more reply

j / k navigate · click thread line to collapse

0 pointsRadle12y ago0 comments

We are not talking about being bad at English we are talking about being difficult to understand.

Facebook gives 500$ per Bug reported, which ends up in a lot of Fail reports if somebody like this gets send:

You might mistake it for.

"You can post something on a friends page and you can't see it if you aren't friend with that person"

0 comments

sgift12y ago

borplk12y ago

Facebook couldn't care less about the amount of bounty paid.

That amount for Facebook is practically like a chocolate bar.

They do not want to pay him because he exploited the bug he found two different times, once on the CEO's profile which has resulted in a very significant and negative PR for Facebook.

Facebook will not say "Thanks for creating shitty PR for our brand and damaging our reputation, here have this money"

sgift12y ago

1 more reply

j / k navigate · click thread line to collapse