This one is fun: https://hackerone.com/reports/2981245

> submitter: After thinking it through, I’m really sad to say that I’m not comfortable with disclosing the report . I’d prefer to keep it private . I hope this doesn’t cause any issues, and I appreciate your understanding."

> bagder: I am willing to give you some time to think about your life choices, but I am going to disclose this report later. For human kind, for research, for everyone to learn. Including you.

> submitter: After thinking it over, I’ve decided I’m okay with disclosing the report. Honestly, the best way for me and others to learn is by learning from our mistakes, and I think sharing this will help .

A good one! I like how Daniel pretended like not disclosing it was an option just to show their reaction.

> "the best way for me and others to learn is by learning from our mistakes, and I think sharing this will help"

I guess it worked, that's their only hackerone report they made from that account.

Well, in reality the probably abandoned it, created another account and continued on with the script.

You're assuming the process isn't automated. This could just be an app that gets them more green dots on their Github page. This developer might not even be a real person. https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-t...

It’s a game to them, they don’t care.

They likely live somewhere where a $50 beg bounty would be half a year’s work.

How do you feel about pixels in a video game? That’s all the maintainer is to them.