Cracking My Windshield and Earning $10k on the Tesla Bug Bounty Program
We should always, always plaude and praise companies that are at least this serious about bounty programs.Two years ago, despite I wouldn't call myself the deepest technical person on the planet, I found a terrible bug that exposed 1.1M records for a bay area startup. (edit: the bug was really easy to find, it was a form of URL injection. I couldn't even believe that bug was there in the first place).I reached out to them multiple times, only to realize they were going to ignore me in perpetuity. I didn't even want money, I would have been happy just to see the bug fixed. (I never helped fix a bug that another company had). Nada.A less scrupulous person would have sold that information and exposed data for 1.1M people.I am not naming the company here, even though they would totally deserve it.