Looks like he acquired login information, he didn't exploit some sort of major vulnerability that needed to be fixed which is generally what bug bounties seem to be for. He's insulted he didn't get paid for not being an asshole, what a strange world we live in. Facebook (or any other company) wouldn't pay out if one of their support staff accidentally made a random user an admin, why should this be any different.

I find the author's righteous indignation that he did not receive the ransom he thought he deserved amusing at best.

Just because someone leaves their car door unlocked and you tell them about it, doesn't mean they are obligated to give you any of its contents.

You got my hopes up that we'd finally be able to audit Bittorent Sync.

You have to be proud of yourself for not abusing it no mater how they responded. You did right thing here. Hope Bitorrent Inc will fix this misunderstanding.

If one guy could accidentally stumble upon this, what are the chances others have too? Would it be possible or even likely that the source code or binaries or web servers or private keys have already been compromised or trojanized?

Some thoughts: From the perspective of the company, what kind of financial impact would they have suffered should that information have fallen in different (malicious) hands? Providing an adequate award not only shows appreciation but it sets a precedent should something similar happen again. The 'finder' who might otherwise usually go the malicious route will be more likely to do as MentalL has.

undefined

By submitting this information to BT, he indeed closed a access point to all this data, thus reducing the likelyhood of it being badly used. Isn't this exactly why bounties were created? Because its better to give a few bucks and increase the system's security than to have it compromised for worse costs.

Stay classy!

undefined

It's not the amount of money so much as the "so invoice us" attitude.

whilst i agree they are ungrateful and inept i can't help but notice that you want a reward for doing the right thing?

get over it... life isn't this nice, you are entitled to nearly nothing. deal.

undefined