Comment

Comment by leftcenterright

Beg bounty hunters have damaged the field so much.

But even in 2025, I have come across companies who do not at all care about rewarding good security researchers who report issues. Hell, I have even been ghosted after reporting the bug which they promptly fixed and did not even write back to say a "thank you". Has anyone else also encountered this behavior from tech companies? (not talking about a non profit, hospital or gov agency here)

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton