Conversation

Good read on #BlaBlaCar's #BountyFactory bug bounty:
https://blog.yeswehack.com/2018/04/23/bug-bounty-take-the-leap-itw-alain-tiemblo-blablacar/

"We wish to open our program to the public on an ongoing basis, whenever possible. For example, if we have too many reports to process, we may put it back in private to manage the flow and avoid duplicate reports. Hunters work very hard to find loopholes, so it is top priority to avoid being overwhelmed."

I am managing 2 bounty programs on BountyFactory, this is 💯% true.

#InfoSec #WebSecurity