Cracking My Windshield and Earning $10k on the Tesla Bug Bounty Program
We should always, always plaude and praise companies that are at least this serious about bounty programs.<p>Two years ago, despite I wouldn't call myself the deepest technical person on the planet, I found a terrible bug that exposed 1.1M records for a bay area startup. (edit: the bug was really easy to find, it was a form of URL injection. I couldn't even believe that bug was there in the first place).<p>I reached out to them multiple times, only to realize they were going to ignore me in perpetuity. I didn't even want money, I would have been happy just to see the bug fixed. (I never helped fix a bug that another company had). Nada.<p>A less scrupulous person would have sold that information and exposed data for 1.1M people.<p>I am not naming the company here, even though they would totally deserve it.