Youssef Sammouda (sam0)
3 years
Some Bug bounty programs are really untruthful.
Reported an OAuth bug, got 200$ for it, after long discussions and explanation i got an extra 3400$.
Now, 8 months later same bug, place, impact,priority, same program,i got 2400$, not even the same reward as before nor for P2 bugs.