&gt; Why do the policy specifics matter?<p>Companies take big risks in running bounty programs. They are giving hackers permission to test their <i>live site.</i> This isn&#x27;t something that is popular with everyone inside a company. Bounty hunters need to respect that bounty programs are a two way street. If you find a serious issue like remote code execution you need to be extra careful. Wineberg was an experienced hunter. He should have known better.