OpenBugBounty.org > Bug Bounty List > Fark Inc Bug Bounty Program

Fark Inc Bug Bounty Program

Fark Inc runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Fark Inc

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Fark Inc and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.fark.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Screenshots and a maybe PoC would be helpful. The source IPv4/IPv6 address you used to test would be helpful for cross-referencing in our own logs.

Testing Requirements:

Social engineering is out of scope. I mean, we know people in general are easy to phish...

Possible Awards:

One year of free TotalFark (worth $100) -- see https://www.fark.com/farq/about/#What_is_TotalFark?

As noted in https://www.fark.com/farq/faq/#How_do_I_report_a_bug_or_a_security_issue? we do not have a bug bounty cash (or Bitcoin) program for security bugs, as we're a VERY small company with no budget for such things.

We take security seriously and welcome reports of working exploits so we can improve our UX for everyone, but if you're scanning just for reward money, this is probably the wrong website to be testing against. :)

Special Notes:

We do have some... creative honeypots. No rewards for finding those. ;)

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

No comments so far.

Latest Patched

Recent Recommendations

14 May, 2024

TheDevinSwan:

Thank you for reporting vulnerabilities on our site. Your prompt assistance enabled us to resolve the issue quickly.

1 May, 2024

Mek:

Got a recommendation to fix an SQL injection vulnerability on my website. As I am a hobbyist and my page is a hobby project, I can't offer money, so I am recommending this researcher. Thanks again.

26 April, 2024

I_bims_Mike:

Thank you very much for identifying the XSS vulnerability and for our friendly email exchange.

22 April, 2024

genoverband:

Thank you for your invaluable help in ensuring the security of our domain and its visitors!

10 April, 2024

Mars:

Hatim uncovered a XSS bug that we were able to quickly resolve. Thanks very much for your assistance and help.


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.