How is a bug bounty not paying for duplicates completely different from a 3rd party hacking competition not paying out for things that the vendors say they knew about but didn’t patch before the contest?

Welp, bros who haven’t really thought this through see no difference at all
Also, for the bros: did you know that bug bounties AND hacking contests all say the party running it has complete discretion over prizes?
That they ALL change their rules from time to time to clarify in cases exactly like this?
Didn’t know that?
Weighed in anyway though didn’t ya
Nobody complained when ZDI suddenly added prize money for all entries that came to the competition & could pop the target - DURING previous contests.
Remember when only the 1st pwner against each target could win?
That mid-contest rule change wasn’t controversial.
I wonder why??
Remember my dudes, when you find yourself arguing in favor of following strict rules in a hacking contest, one that has had prizes increased mid-contest before, you just found yourself on the wrong side of the patriarchy AND betraying your hacker r00tz all at once!
How efficient.
You can follow @k8em0.
Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled: