Haha no, I was just poking fun at high profile bug bounty programs like Facebook&#x2F;Google&#x27;s which routinely offer pennies for very very serious vulnerabilities.<p>I&#x27;m not in a position to discuss bug bounty ethics or judge what the right thing to do is given the market circumstances, I&#x27;m only in a position to make an opportune joke.<p>But you gotta admit...it <i>is</i> amusing seeing very critical vulnerabilities like ubiquitous user login being reported by researchers whom get 5k or 10k for doing the right thing. These holes could instantly cripple the trust of a company&#x27;s userbase and yet the people reporting them get pennies.