People are mad at Marc Lou (again)

Join this channel to get access to perks:
/ @anthonysistilli
Dave's tweet: x.com/activeno...
Marc Lou's tweet: x.com/marc_lou...
Thanks for watching! Make sure you subscribe for more cool videos.
Join Startup & Tech Discord:
/ discord
All my socials & links:
links.sistilli...
My mind map (startup notes & essays):
map.sistilli.dev
My coding & video equiptment:
www.amazon.ca/...

[@activenode]

Well summarised and rather neutral. You did hit the nail on the head . Cheers. Dave

[@МихайлоДвалі]

Analogy with mr beast was so funny

[@mahmoudtokura]

If he gave out thousands of dollars every time, someone found a vulnerability in his app, that may ruin him and make his app a target for bug bounty hunters. We can not compare big tech companies' bug bounty to our solo SaaS. If Facebook gave you 1 million dollars for finding a bug, how much of their monthly revenue is that? The biggest problem for me is people assuming that the person who found the bug is broke, needy, or homeless.

[@wlockuz4467]

I guess the point being made is that he did a flat payment and is using it as a means to virtue signal. People are saying that if you're capable you should reward accordingly. Most sane companies who understand bug bounties would assess the severity of the bug and pay the reward based on that. For example Facebook would pay you more for reporting an XSS, than something like being able to view a protected picture.

[@alubhau]

Putting this here for the algorithm. Much love

[@om-anand-yt]

You’re criticized if you do, and criticized if you don’t. I don’t know much about Marc but there are multi million dollar companies which give you certificate with a shiny gold star for catching vulnerabilities in their bug bounty programs which would’ve otherwise wrecked their business. I’d imagine a 10k RCE is probably worth less than the actual data you could spy on 🤷‍♂️

[@Dom-zy1qy]

A lot of times to profit off of those vulnerabilities , you need a sophisticated strategy. Its also much riskier when you're going against large companies with cybersecurity depts and the means to pursue legal action if they catch you. It's easier to just take the 10-50k and move on.

[@nullx2368]

The only mistake here is tweeting about it. When it comes to security, rewarding it with money will lead others to mass attack your sites... of course it can be a good thing, but not with such a huge following. It's kinda good that the reward "sucks". If it was like 5k$, people would try to take down his sites for "rewards"

[@itwasntme947]

Narcissists can't help themselves but to overshare every single aspect of their lives.

[@Jadoobi]

Sounds like it was minor enough to warrant a fair payout. I don't see a problem with it. Major corporations pay much less to people for low impact bugs all the time. They also pay more for higher impact bugs. It's up to the owner of the software to determine how much that vulnerability is worth. Good on Jonas for disclosing responsibly. Marc and Jonas are both happy, that's all that matters.

[@notMichal]

👌Good summary. As of yesterday you have even more content, more drama, more bugs

[@ZedCodedSomething]

Totally understand why you would dislike Twitter. I tried snooping around too and felt the tension everywhere 😂 Seems like it’s only for someone building a product targeting devs on the creator side. But I did find some small group of people posting free valuable content in marketing and development.

[@vasiovasio]

Twitter and Stackoverflow makes 4chan and OF looking like warm and positive communities for Everyone! 😂😂😂

[@thatscheckmate]

"Nothing crazy, right?" goes directly to: "As you can guess, twitter wasn't too happy about that"

[@NvidiaRTX5080]

Twitter moment

[@ardyce]

yea the whole comparison of it being a homeless guy getting paid a cent is just weird cause why assume the dude who found the vuln is in dire need of cash and the go on to compare $300 to a cent is just crazy

[@tim.2245]

Why does Dave (the twitter guy) say that Marc’s site/app is illegal in EU?

[@CarlosArthur]

Same reason Apple is not launching Apple intelligence in Europe. Privacy laws. Datafast is a analytics company, even when you use stuff like Google analytics you need to add custom privacy policies setting for Europe

[@தமிழோன்]

I think it has something to do with the GDPR compliance, the EU AI Act compliance, etc., etc. All companies (even the foreign ones who serve the EU customers), have to comply with their strict regulations or face repercussions. The EU is very strict when it comes to people's privacy and safety.

[@thisisloop]

He doesnt have a cookie banner which is mandatory for all sites in eu.

[@dobroslav.radosavljevic]

​@@thisisloop Well true, but only if you collect cookies :D And he is collecting a lot sadly. His whole product is built around cookie tracking. It's tracking people for 1 year straight with a cookie. And he has 0 banners about it on any of his website, where he is using his tool. That's why it's illegal.

[@thisisloop]

@@dobroslav.radosavljevic Yep, thats not good. Someone from germany could sue him and he would have to pay a hefty fine

[@thefart]

"A bunch of arguing over a whole bunch of nothing" couldn't have described it better myself

[@yashwanthch18]

Nice Video!!

[@isfandiyor_bakhtiyorov]

Watching this video for the second time 😜

[@AdamTechTips27]

wah so fast

[@whereisartist]

😅

[@Limestarz]

I hate and like Marc Lou at the same time. I think his advice is often real and useful for startup solos and I love that, but at the same time I do get the hate for him. The fact that he basically makes most of his money from a pyramid scheme template is what makes me irrationally mad at him for some reason. I think I hate the overall trend I see for youtuber programmers because its always selling a course /interview prep of some kind to get you in the door or in marc's case a template to sell your goods to most likely another programmer.