Experience with PornHub's bug bounty: Scornhub
Another grumbly hacker complaining about a bug bounty undervaluing their work.<p>It wasnt long ago that notifying a company that they had a vuln was an act that risked prosecution.<p>Bug bounties are a release valve.  They are not a substitute for a job.  They will never pay the same as crime.  Writeups like this are not going to facilitate relationships with leaders in the security industry.  This post and others like them are embarrassingly naive.