X Refuses to Pay Bug Bounty On Critical Vulnerability, Kicks Out Whitehat Instead

X is broke and broken, everyone seems to already know that. But is it broke because it’s broken, or broken because it’s broke? It seems the platform, under the helm of owner Elon Musk, just can’t keep itself from making bigger problems. Now, it’s refusing to pay whitehats in its bug bounty program.

One such whitehat is X user @rabbit_2333, who found an XSS vulnerability in the platform’s analytics subdomain that can basically let hackers take over any account. @rabbit_2333 claims that he reported the massive vulnerability but X dismissed the report, saying they’d known about it for a year and were already addressing it, adding it “decided that this report is not eligible for a bounty.”

This was when @rabbit_2333 decided that if X can shrug this bug report off, then he (or she) can break protocol and make the discovery public. 

Also, if X had known about it for a year and haven’t fixed it, then it must be not that big of a deal, right? After @rabbit_2333 posted about the vulnerability and it went around developer circles, Chaofan Shou, co-founder of the smart contract analysis platform Fuzz.Land, posted a demo of just how potentially critical the bug is.

Shortly after, X patched the vulnerability … and kicked @rabbit_2333 from their bug bounty program for violating the HackerOne code of conduct for posting about the vulnerability.

Bug bounty programs are a way for companies and developers to reward ethical hackers or whitehats for successfully discovering and reporting bugs or vulnerabilities. It lets companies, like X, privately engage the hacker community to, well, get the bugs out, and improve the security of their systems.

So if, especially at their stripped-down state with fewer developers, they’re no longer compensating ethical hackers — even for something as critical as the vulnerability that @rabit_2333 spotted — just imagine what else could go wrong.

But yeah, Musk thinks advertisers leaving is Media Matters’ and the mainstream media’s fault.


Information for this story was found via X, and the sources and companies mentioned. The author has no securities or affiliations related to the organizations discussed. Not a recommendation to buy or sell. Always do additional research and consult a professional before purchasing a security. The author holds no licenses.

Leave a Reply

Video Articles

Endeavour Mining Q1 Earnings: Cash Flow Is King

G Mining Oko West Feasibility: Move Fast, Break.. Nothing?

New Gold Q1 Earnings: What’s Behind The Market’s Surprising Reaction?

Recommended

Giant Mining Encounters Native Copper As Hole MHB-34 Hits 563 Metres Depth

Verses Hits Commercialization Stage With Genius AI Platform

Related News

Twitter Ad Revenue Evaporates As Advertisers Remain Wary of Musk

New estimates show that despite huge discounts and the promise of better control with new...

Friday, April 7, 2023, 03:27:00 PM

Ex-Twitter Employees Sue Elon Musk For Not Paying Severance, Claim “Elon Doesn’t Pay Rent”

A group of long-time former Twitter employees are suing the social media company and its...

Thursday, May 18, 2023, 11:44:00 AM

CBC Halts Twitter Feed After Elon Musk Slaps Account With ‘Government Funded Media’ Label

CBC/Radio Canada is halting all social media activity across its Twitter accounts, after the platform...

Monday, April 17, 2023, 06:30:22 PM

Bluesky: The New Twitter? | Exploring Jack Dorsey’s New Venture

Remember “Big Head” from the show “Silicon Valley”? You know, the lucky and lazy tech...

Saturday, May 13, 2023, 11:24:00 AM

Farewell, Twitter! 50 of Twitter’s Top 100 Advertisers Have Left the Platform Since Elon Musk Takeover

Since taking over Twitter, Elon Musk envisioned a social media platform where advertisers, prominent figures...

Saturday, November 26, 2022, 11:04:00 AM