A Bug in the Bugbounty

http://engineering.prezi.com/

by coloneltcb • 13 years ago

7 6 13 years ago

engineering.prezi.com

nodata2• 13 years ago

The program has a limited scope for now, because these subdomains are the high priority areas to make Prezi more secure for our users.

How is their source code repo not a high priority to make Prezi secure?

halacsy2• 13 years ago

We removed the source code repo from out-of-scope domains. On the other hand: opening the source should not make prezi insecure ;)

hp, prezi cto

nodata2• 13 years ago

Well write access to the prezi source could make prezi insecure...

agrias• 13 years ago

I'm glad they decided to reward Shubman Shah and I hope for the future this will help set a precedence on better communication and what deserves compensation.

moonka• 13 years ago

To improve the program from now on we will reward bug hunters who find bugs outside of the scope provided that they do not violate our users’ information and that their report triggers us to improve our code base. We will also retroactively check to see if other reports found issues that fall into this category.

Do they say that they are going to reward him? I haven't seen that stated anywhere yet.

halacsy2• 13 years ago

yes, we are going to reward the bug and even retroactively we will check to see if other reports found issues that fall into this category

A Bug in the Bugbounty

Related Stories