Hacker News new | ask | show | jobs
by datacruncher01 1023 days ago
Best advice I can give someone is never do security research for a company without expressed written consent to do so and document everything as agreed to.

Payouts for finding bugs when there isn't an already established process are either not going to be worth your time or will be seen as malicious activity.