blah blah blah, this dude is completely full of shit

Here's the scoop

HackerOne works with a very small, select group of security "professionals" for bug bounties.

Burp Proxy is the primary tool used for exploitation.

Burp Proxy relays all high value exploits back to portswigger.net.

James Kettle via portswigger.net brokers those high value vulnerability reports back to that same select group of security "professionals" that then in turn beat other security researchers to the punch in terms of the payout.

And Uber's security team is a complete and total piece of shit. A while back I compromised Uber's m.uber.com mobile endpoint with multiple high value vulnerabilities via HackerOne's bug bounty, only to have this exact same "notaffy" dude get awarded the $35K bounty from Uber in the weeks that followed, and with Uber locking via HackerOne all of my disclosures so that this notaffy turd could get the complete payouts by claiming that he had discovered them first in the literal hours before I had submitted my bug bounty reports.

Weeks and weeks of research into Uber's backend via HackerOne using Burp Proxy, at least eight critical vulns disclosed to HackerOne / Uber including reflected XSS and remote code execution capability, not a single dime awarded to me and with HackerOne locking all of my disclosures.

Burp Proxy is completely backdoored. When you scan targets with Burp Proxy, all high value vulnerabilities go to portswigger.net. You are then competing with this small select group of douchebags to beat them to the disclosure punch, and even then if you win, HackerOne will still award those vulnerabilities to this small select group while locking your disclosures from public dissemination.

HackerOne is complete garbage.

Uber is complete garbage.

And most importantly, portswigger.net and Burp Proxy is completely compromised to aggregate all high value discovered vulnerabilities, to be brokered to this select group of dickheads that sit on their ass and wait for the logs to roll in, at which point you are competing with them for all of the work you've put into the bug bounty.