
AMD denied security researcher Paul a $10,000 bug bounty for reporting a remote code execution vulnerability in its auto-updater software. The company rejected the report because man-in-the-middle attacks were not covered by its bounty policy. Paul took down his blog post at AMD's request but never received payment.
Tap to vote and see what everyone thinks.