At least you're reporting legit vulnerabilities. Meanwhile I'm over here swarmed by "vulnerability reports" about SPF for a fukken subdomain that never gets used for email, and has it configured correctly already 😑

[–] slazer2au 11 points 3 months ago* (last edited 3 months ago) (1 children)

You should look up Beg Bounties by the guy that does haveibeenpwned

Edit: here it is for others to see

https://www.troyhunt.com/beg-bounties/

[–] voracitude 6 points 3 months ago

I've not heard of it, I'll check it out!

[–] [email protected] 5 points 3 months ago

I have reported a few vulnerabilities in the last years, but sometimes it is hard to judge whether or not it is a real vulnerability or just a minor bug.

But I'd rather report one bug too much than keep silent about it.