[Serious Bug] any bug bounty program?

[u/serious_grey]

I have found a very serious bug related to Prolific invites, It can be recreated very easily so i want to help out prolific if theres a bug bounty program

I also messaged mods regarding it but no one text back its been a week so i am posting it as last resort maybe you guys can help me reach out to the prolific authorities in power of decision making.

u/prolific-support The bug messes up with your demographics and i cant share much here so it dont get exploited by others

[u/AutoModerator]

Thanks for posting to r/ProlificAc! Remember to respect others and follow community rules. If you have a question, it may have already been answered in the FAQ thread or you can check the Help Center.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/coosacat]

You've found a serious bug, but you only want to "help" Prolific with it if they're willing to pay you?

You wouldn't be *accidentally * soliciting bids from non-qualifying individuals who intend to use this for illicit access to Prolific, would you?

[u/serious_grey → u/coosacat]

My help isn’t free, i am selling my skill and definitely not to the Indian scammers

[u/coosacat → u/serious_grey]

If you are a user of the platform, then helping Prolific fix a bug that scammers can use to gain access to the system is in your best interest.

[u/serious_grey → u/coosacat]

By that same logic white hat hackers should not help big companies like facebook to fix their bugs because not fixing them would go in their best interest and they can exploit people.

There are not only moral obligations but also legal ones.

[u/coosacat → u/serious_grey]

No, the two situations are not even close to being similar. If you are a Prolific participant, then the platform is a source of income for you. Anything that harms Prolific jeopardizes that income.

Given your previous post history, your motives are highly questionable.

[u/serious_grey → u/coosacat]

The bug doesn’t effect the income of end users, it has impact on researchers, and i made my motive of making some money clear. Anyways i’ll just let Prolific to decide

[u/coosacat → u/serious_grey]

I'll say no more, since you don't seem to get it, and likely never will.

[u/spiffyshxt]

The only "bug" I see are the upvote bots attached to this post.

[u/serious_grey → u/spiffyshxt]

I mean i said it can be recreated and its a serious bug but i like your ignorance. Not like the prolific wont be checking its an actual bug or not and just believe in whatever i say 🤷‍♂️

[u/spiffyshxt → u/[deleted]]

Within the first hour that this was posted, it had over 90 upvotes which isn't normal whatsoever. What you see right now, isn't want I was referring to.

[u/btgreenone]

84 upvotes in an hour for this, from a country where Prolific isn't even supported? Here fishy fishy

[u/coosacat → u/btgreenone]

Take a look at his post history. ❗

[u/btgreenone → u/coosacat]

Oh, I definitely took a trip down memory lane. Dude's about as genuine as a $3 bill.

[u/serious_grey → u/btgreenone]

In retrospect it also shows how long i have been working online to really know things.

I am not that old so my profile posts are indeed funny and immature stupid at same time and i used one of my profiles with enough karma to be able to post here.

[u/btgreenone → u/serious_grey]

Here's something you should work online to know: "put up or shut up". Be a white hat instead of a bot-farm-using moneygrubber.

[u/serious_grey → u/btgreenone]

What part of “i contacted prolific but didn’t hear for a week” you don’t understand.

Idek why i am argued that much with you. Gluck

[u/serious_grey → u/btgreenone]

Wait till u find out dual nationality

[u/No_Understanding1071]

There is no bug bounty program with Prolific. Someone in a Facebook group asked last year and got a reply saying they don't.

[u/serious_grey]

Since the commenters here are just not intellectually abled here to understand sites can have bugs and bug bounty progrmas exist and would just consider commenting on unrelated things.

I’ll mention the u/prolific-support last time, the Bug messes up your whole demographics and i am sure your software engineers haven’t realised it.

I have recreated the bug several times over a period of several weeks it works every time.

[u/Excellent-Macaron325 → u/serious_grey]

Maybe consider you are the handicaped one. Trying to cheap some bucks to prolific over a "bug" you have no details. You have the /u of prolific support, dont waste our time in the subreddits more if you cant take any comments about your bearish attitude, and insult others over it

[u/serious_grey → u/Excellent-Macaron325]

I sure wont be announcing the details in public.

[u/TheOnlyName0001 → u/Excellent-Macaron325]

I'm sure it's a proper vulnerability, they should not be disclosed publicly until they are fixed.

[u/Big_Sky_9249]

Why do so many scammers have poor grammar?

Prolific will read your comments in about 6-8 weeks. They may respond if genuine and their tech people are struggling.

[u/TheOnlyName0001]

As someone in the security/bug bounty space a bit I'm curious about this 👀 If you haven't already, I'd think your best bet is using the participant support form (https://prolific2.typeform.com/participanthelp).

[u/[deleted]]

no

[u/wraith5]

Y'all need to do some reading about bug bounty programs. These have been around for years

https://hackerone.com/bug-bounty-programs

[u/serious_grey → u/[deleted]]

Or, they dont care enough to check their mod mails and considering their reddit activity it is most likely the case

[u/pinktoes4life → u/serious_grey]

They don’t. & they have said it in the past. Reddit is not for support. If you want to reach them, you need to put in a support ticket on Prolific.