Love to hear more on the motivation for agreeing to this.
e.g. The $5000? Amnesty from being sued?
Also he's 16. I'd definitely be less willing to push back (especially on something like this) at his age
Speaking of being sue, I once found a hole in a healthcare system. I solicited legal advice and the response was overwhelmingly against reporting. The company didn’t not have a bounty program. So I shut up knowing my info is sitting there exposed. I wonder what’s the consensus on this? Do people normally report it or not?
On some forms I was advised to report hippa complaint. I can’t remember if I did. This was 10 or more years ago.
Not getting your life ruined by getting sued by a trillion dollar company sounds like a pretty good motivation
i think the answer is simple: they're a kid, and microsoft bullied them.
Sounds like he’s gotten bug bounties from MS in the past. Might be forward thinking to keep the relationship amicable going forward.
Giving the benefit of the doubt to Microsoft it seems like a pretty complete write up. If the changes weren’t material that might have been part of it too.
And he’s 16. Parents might have had a say.