PayPal Reviewing Qualifying Age For Vulnerability Rewards 95
itwbennett writes "In follow-up to 17-year old Robert Kugler's claim that PayPal denied him a bug bounty because he was under 18, the company now says that it is 'investigating whether it can lower the qualifying age for vulnerability rewards for those who responsibly report security problems.' The company also said that the vulnerability had already been reported by another researcher — although they didn't mention that in the email to Kugler telling him he wouldn't be receiving payment."
The message: (Score:5, Interesting)
When you're young, don't report the bug to the company in question or the authorities, report it to those that can make "good use" of them. Not only do they not have any problem with you being underage, you being underage also means you most likely won't be doing time if you get caught.
It's just so win-win...
Whose Account ? (Score:4, Interesting)
PayPal has account eligibility requirement that you must be 18 to open an account. And yes I checked it applies in Germany.
Also you aren't supposed to let others use your account.
So how did he avoid these terms of service?
Re:Award scholarships for under-aged people (Score:4, Interesting)
None of what you said has anything to do with the age of the bug researcher. Still a pretty stupid argument imo, name one law that would prevent a 17 year old from getting paid for finding a bug.
I do however agree that they are not the same company and would go about writing their policy around it differently, but that has nothing to do with the legality of it whatsoever.
Your "insightful" off point and irrelevant statement got mine downmodded you ho. J/k :)
And one more time just to be clear: corporate policy != law and amen for that.