Hacker News new | ask | show | jobs
by ozten 1257 days ago
$500 for this bug bounty seems very low.
2 comments

I'm not too surprised. Gumroad was bought by venture capital, found not profitable enough. Bought back by the founder. And maintained by a lightweight team.
Still seems cheap.

> $3,896,872 The amount of income earned by Gumroad digital entrepreneurs last week.

https://gumroad.com/ ~3 screens from the bottom

> Fees on Gumroad are simple: When you make a sale, we charge a 10% fee. This does not include credit card processing or PayPal fees. There are no monthly payments or other hidden charges.

https://help.gumroad.com/article/66-gumroads-fees

1,000 bps⁉ And not including credit card processing fees?

That's a good business to be in!

Are there any competitors? Seems a lot for a commodity service
https://backed.by launched yesterday. It's a decentralized Patreon competitor that only takes 1%

I actually want to make a dedicated post about it cause it seems like an actually interesting utility of web3, but I also know a lot of people might just see web3 and automatically downvote.

Does it support real currency too? Doesn't matter what the cut is if it's a percentage of $0/month

E: the getting started page could do with being whittled down, linking someone to this and still expecting donations is ambitious! https://backed.by/pages/get-started

Indeed. I think it should be $1250 minimum, which would be a week's pay at a $65000 salary.

I think they might have kept it below $600 because of the IRS's $600 threshold* which to me is tantamount to them deciding not to pay a real bug bounty.

* https://www.bloomberg.com/news/articles/2022-12-23/irs-delay...

That is still low because of the unpredictability. It might take weeks of work across many sites to find a bug. So the bounty needs to be high to compensate for that, if it is to be a career.