This is the new norm.
Your team’s goal shouldn’t be to shut down your bug bounty because you’re worried about getting too many AI reports.
It should be to make sure the right people are incentivized to find bugs first.
Because every person with a $20 Claude subscription will be able to find vulnerabilities in your code.
The question won’t be whether bugs can be found.
It’ll be who finds them first
@MitchellAmador Wow that was really huge fake propaganda effort if even me who don't give a shit about such news, but I somehow read it back then and still remember it
@0x3b33 Yeah, you re right here. I'd have better explained myself - what I mean as sad is that people often do something showing they ain't good, nevertheless they get noticed and respected. That particular bug is also a good example, imo.
I saved offline copies of every source cited here in case anything gets deleted:
https://t.co/AgGmW5aUAK
Read the @RektHQ investigation that started all of this: https://t.co/90VdNs31TE
Nobody who embedded @sumsub into their compliance stack was told any of this.
Now you know.
@joehas Thank you for the explanation, I am far from that merger stuff, I am a dumb consumer. Was pretty amused to see Jack Daniels in a deal considering all that's happening with trumps tariffs and all.