-
marcoarment You don’t have a public bug bounty program, so it’s not reasonable to demand payment. You could throw them a few bucks/euros but definitely don’t have to send that much money. It’s not a ‘scam’ but it’s also not, uh, worth that much.
samthegeek’s Twitter Archive—№ 57,444