I Got Paid $0 from the Uber Security Bug Bounty
This is not just about Uber; it also indicates problems at HackerOne, if this is its response to a mediation request:<p>"we have contacted the Uber App Sec team and they have confirmed with us that these are not security issues that are in scope on their program."<p>Contacting the other party and reporting back what they say is <i>not</i> what is meant by mediation. This is underscored by the next sentence:<p>"I understand that this can be a disappointment but I can assure you that <i>they</i> looked at this report and gave it the proper attention it deserved." [my emphasis.]