TLDR Tech / InfoSec
The downfall of bug bounties
Bug bounty platforms are drowning in AI-generated reports. HackerOne and Bugcrowd can't tell skilled researchers from automated slop submissions. Shubham Shah, ranked #1 on Uber's program after ten years, submitted a mass PII leak on April 24. First human response came May 6—a 12-day delay instead of the usual 1-3. Platforms treat decade-long contributors the same as first-time submitters using AI agents. Talented researchers now skip platforms entirely, choosing private programs or unpaid research. Response times used to fuel motivation - now they kill it.
Read the full story