Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah I never get the "we knew about it internally" excuse. I can understand if another reporter got to it on the same day and they were in the process of mitigating, but even then they should have to prove it somehow.

I'm sure someone will tell me why I'm wrong but it feels like they're just dodging payouts. Reduces trust and motivation to report it.



you're not wrong at all, this was abysmally handled by Anthropic and is a slap in the face for OP. I would have been much more upset


Unfortunately, this is common for bug bounties.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: