V A S I

@sasi2103 @GoogleVRP What message you got ?

Got a response from @GoogleVRP today about a bug I reported months ago. It’s back after another review. This is why I love security research: “...truly unique reports that caused our security teams to think differently about a problem.”

@thedawgyg @_lopseg_ Ok what response u got from chrome team now

@vasiign @_lopseg_ i thought it was Tuesday and Thursday (it was in the past) but last time i got my bounty on Friday

Chrome replied to me today.. I didn't realize I was suppose to email the panel directly when i added the RCE exploit. One of their members tagged them for me, and hope to have an update in the near future (maybe next week if i get lucky?)

@_lopseg_ @thedawgyg U know the panel meet when happens ?

@thedawgyg I hope you get your bounty, bro. Google is awesome.

@thedawgyg Hi Any update from panel regarding your Chrome RCE bug ?

Waking up on Monday morning to a new Chrome 0day is the best way to start the week <3 now to figure out if its a RCE candidate or not xD

Hi Guys, Recently reported a Youtube Issue which is now fixed at @GoogleVRP @vasanthgn/something-was-hidden-in-youtube-until-i-checked-the-page-source-9e8bf9b51401" target="_blank" rel="nofollow noopener">medium.com/@vasanthgn/som… #bugbounty #cybersecurity #googlevrp #youtube

@psomkar1 Your pdf files is money for them

just found out iLovePDF is a million-dollar company. How is it even making money? 😭

@brutecat @inspector_amb Google VRP

@inspector_amb which VRP is this? i’ve always seen P0 come first 😂

Priority is also going up...

@joneseth @thedawgyg @joneseth can you DM me please

@vasiign @thedawgyg All google vrp

Submitted the full RCE to Chrome VRP 2 weeks ago and still not a single response... Someone wanna poke them with a stick for me? I don't wanna ping them again and bug them lol

@thedawgyg @joneseth Hope u r daughter enjoy the bounty soon

@vasiign @joneseth i hope it will happen today that would be awesome. my daughter says she gets 10% of any new bounty they give, and we are gonna donate 25% of any additional bounty as well. We have some plans to do some stuff to help others and help get her involved into hacking.

@thedawgyg @joneseth But last time u said u got bounty on Friday u know which exact days it is happening panel meet ?

@thedawgyg @joneseth But it is surprise to see chrome is not even considering rce as critical 💀

@joneseth @thedawgyg Ok may I know when they report sent to panel I mean which date and month

@vasiign @thedawgyg P2 S2

@joneseth @thedawgyg Pending bounty in the sense your report got accepted and sent to VRP panel right ?

@thedawgyg @joneseth Ok hope today u will get response as today Panel meet will be happening …

@vasiign @joneseth chrome, they paid $11,000 for it originally, then I gave them the real working RCE from a web page 2 weeks ago

@joneseth @thedawgyg In chrome or Google VRP u r bounty is pending ?

@thedawgyg I also have 5 reports pending bounty, they said they have long queue

@Behi_Sec Ok 👌 thanks

@vasiign Before

If you have any questions about bug hunting, feel free to ask!

@YShahinzadeh @rez0__ 5 pending bounty when u reported those bug I mean which month ?

@rez0__ today was the day, I got three "Nice Catch" from Google, 5 pending to bounty totally

*finger guns*

@propnic1 @YShahinzadeh Ok thanks

@vasiign @YShahinzadeh 30 days after accepted.

new to Google VRP, seems google does not define the bounty amount right after triage, the bug is on an AI product (I cannot name it here), I'm not sure how much bounty should I expect here