Ask HN: MSRC silently patched my report (Status: "Complete") but denied bounty?

3 points

6 months ago

TL;DR: MSRC admitted via email that they "addressed the issue technically," moved the case status from "Develop" to "Complete" (Fixed), but still denied the bounty claiming it was "Content Policy."

Is this "silent patching" behavior common with MSRC recently? It feels like they used the report to patch the product but labeled it "invalid" to save budget. Full evidence & screenshots here: https://x.com/HoangMon158316/status/1993121590939467827?s=20

2 comments