13

I noticed there is no tag for bug bounty programs. Does it make sense to establish a tag like [bug-bounty] that covers questions about vulnerability reward programs (like the one Google runs) and bug hunting on platforms like HackerOne or Bugcrowd?

I am tempted to create a category for questions like these:

2
  • 1
    If there is nothing similar or potentially synonymous - I say go for it! That is a sensible tag. P.s. please try to flll out the tag wiki / guidance, so that it doesn't get thrown on any "bug"-related question... – AviD♦ Dec 5 '16 at 1:46
  • 1
    Nice that you created the tag! And good usage guidance! – Anders Dec 8 '16 at 10:32
5

I agree it could be a useful tag, but we need to make sure it is used in the right way. There is a high risk that it gets the same problem as the penetration test tag - it is used for question about anything, that just happend to arise while the poster was working on a bug bounty.

To combat that we need good and clear usage guidance, preferably that explicitly explains how to use the tag and not just what the words mean. Maybe something like this (just a suggestion, I am sure it can be improved):

Use for question about the design and workings of bug bounty programs. Do not use for questions about bugs in general, or for questions that is not explicitly about the program itself.

But still, in my humble opinion it would be a useful tag, so I say create it!

3
  • I happen to agree with this. However, if bug-bounty tag was established, it would attract a lot of users who are to ask specifically about how to write a report, why they rejected their bug's & couple more off-topic which isn't related to core penetration testing or information security as a whole. How does one deal with that? – Shritam Bhowmick Dec 15 '16 at 10:19
  • @ShritamBhowmick The tag is already created. :-) I don't think "how to write a report" or "why was I rejected" are necesaraly off topic. But others might disagree. – Anders Dec 15 '16 at 10:21
  • @Anderes, that could be! It won't be any infosec related however. – Shritam Bhowmick Dec 15 '16 at 10:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .