Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So, did someone else get the full $100k for reporting the vuln already or was that BS?


It's entirely possible it came from a channel that wasn't eligible, or from a google employee, or own of their own security testers, etc.


Google could not reproduce it the first time so presumably they didnt pay up.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: