@broken_link420 @LouisVuitton @the_IDORminator This exact reason is why I say. Bug bounties are garbage; it's just a way for companies to get free vulnerability tests by saying everything is either out of scope or not a real finding (yet patch the issue anyways).

@broken_link420 @gentoo_python @LouisVuitton @the_IDORminator Ditto on Grammarly, I found a DLL hijacking vulnerability and they dismissed it as "not in scope".

I found a business logic flaw in some hotels website that allowed me to book a room on a card that was generated from fakenamegenerator; which totaled something like $20k complete with reservation number and confirmation number. Hotel chain claimed it to be mitigated due to requiring a card to be produced at check-in, marked it as a non issue, and docked me rep points for "arguing". Bug bounties on any platform are garbage, and more often than not you won't get paid for the issues you find.

@gentoo_python @broken_link420 @LouisVuitton @the_IDORminator That's insane though; they will always find a way.

@gentoo_python @broken_link420 @LouisVuitton @the_IDORminator And I hate to be that guy, but I think that's why we see more black hats than white hats.