The whole "We're not going to pay you because of something secret we know you didn't" has always been an abusive clause in the whole bug bounty market and I think it's funny people are just realizing it.
-
How do you know there wasn't some 3rd researcher faster than both of you? Did MS disclose the ID of the "first" submitter/submission?
because they admitted it after https://twitter.com/jonasLyk/status/1282945750746509313 … how i knew it before? it was a bug class i invented.... exploited with a driver obviously not looked at before and at that time i had 0 trust in ms
