Sad. We should not encourage people who violate the sole universal rule of bug bounty programs: don't mess with other users. Period.
I understand it's frustrating when a bug report goes ignored or dismissed (still waiting on PayPal to confirm a couple bugs I reported last June or July (admittedly I haven't tried hard)), but that's part of the process. You work with them to refine the message until they understand clearly what the problem is and get it resolved. You don't mess with anyone else's account, under any circumstances.
This is just not acceptable, and it's sad to see some of the security community supporting it.
I understand it's frustrating when a bug report goes ignored or dismissed (still waiting on PayPal to confirm a couple bugs I reported last June or July (admittedly I haven't tried hard)), but that's part of the process. You work with them to refine the message until they understand clearly what the problem is and get it resolved. You don't mess with anyone else's account, under any circumstances.
This is just not acceptable, and it's sad to see some of the security community supporting it.