Yes. Uber Freight is basically a freight brokerage that's being operated at break-even levels:
> UberFreight, which would not control the trucks it relies upon to move customers' freight, is building in only a 5-percent average margin for its net revenue per transaction, according to another person familiar with the matter. On average, net revenue, defined as the revenue a broker generates after its cost of purchased transportation, is around three times that for established brokers. UberFreight's other costs would then be subtracted from its net revenue threshold, leaving the brokerage business either to operate at break-even levels or be a loss leader for the San Francisco-based parent.
> The way most shipping works for most companies today is by going through a brokerage firm, which makes calls to trucking companies and arranges the best deals for its customers. The broker takes a commission of between 15 and 20%. To start, the Uber Freight marketplace will eliminate that middleman and offer shippers real-time pricing of what it will cost to move their goods based on supply and demand.
"The problem lay in a private application programming interface (the slice of code allowing certain outside access) that wasn’t properly checking the person deleting the comment was the same one who posted it, the spokesperson added."
You can't talk about the details of the bug but you can talk about the reward: https://twitter.com/Stephen/status/627190837735239680 The program is legit, they are just very slow (I didn't actually receive the miles until October).
He provides his rational towards the bottom of the post:
> But do we really need a separate template for this? Why not just render everything inside the App component? Yes, you could do it, as long as you are okay with invalid HTML markup and not being able to include inline script tags like Google Analytics directly in the App component. But having said that, invalid markup is probably not relevant to SEO anymore and there are workarounds to include inline script tags in React components. So it's up to you, but for the purposes of this tutorial we will be using a Swig template.
Some programs require you to register an account to report a bug while others use email, but you don't need to get permission to look.
All bug bounty programs have rules that outline what parts of their site/product you can test and what kinds of bugs they are looking for (here's Facebook's https://www.facebook.com/whitehat/). As long as you follow the rules you won't have any legal problems.
2. When looking for bugs in sites with existing programs like Facebook your best chance is when they announce a new feature or product. This includes acquisitions (Facebook paid out over $100,000 for bugs when they added the Oculus websites to their program).
Philippe Harewood (@phwd on Twitter) mantains a list of published Facebook bug bounty reports. It's a very good resource for anyone looking to learn about bug bounties and web app security in general: https://www.facebook.com/notes/phwd/facebook-bug-bounties/70...
> The capital will help fuel Mr. Lore’s grand plans, which include an estimated half-billion-dollar marketing budget and projections for $5 billion in annual transactions by 2020.
This was someone's attempt at a bitcoin public challenge: https://news.ycombinator.com/item?id=6765801 (Get a wallet's passphrase which was the username of someone in the Hacker News top 100, minus 2 characters).
> UberFreight, which would not control the trucks it relies upon to move customers' freight, is building in only a 5-percent average margin for its net revenue per transaction, according to another person familiar with the matter. On average, net revenue, defined as the revenue a broker generates after its cost of purchased transportation, is around three times that for established brokers. UberFreight's other costs would then be subtracted from its net revenue threshold, leaving the brokerage business either to operate at break-even levels or be a loss leader for the San Francisco-based parent.
Source: http://www.dcvelocity.com/articles/20161212--uberfreight-ste...