{"id":"0230409e-f2a3-4d54-9094-599f0551ab1d","engagementId":"5c9cc076-3966-4d35-a9d1-a43e1a10c2ca","data":{"brief":{"id":"a94a41cd-7f62-4689-8661-1afd99363677","name":"Backblaze","tagline":"Help Secure Backblaze","description":"\u003cp\u003eNo technology is perfect and Backblaze believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our assets. Good luck, and happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eNon-Disclosure\u003c/h2\u003e\n\n\u003cp\u003ePlease note: This program does not allow disclosure at any time, even after you leave the program. You may not release information about vulnerabilities found in this program to the public or anyone other than Backblaze. Any offender of this non-disclosure policy shall be removed from the program, shall repay any rewards payment to Backblaze, and shall be subject to the Bugcrowd policies and guidelines on Bugcrowd’s sites, including but not limited to the Bugcrowd Code of Conduct. This does not constitute a waiver of any rights Backblaze may otherwise have under applicable laws.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/p\u003e\n\n\u003ch2\u003eSpecial Rewards \u0026amp; Bonuses ($15k Reward)\u003c/h2\u003e\n\n\u003cp\u003eBackblaze is offering a special \u003cstrong\u003e$15k reward\u003c/strong\u003e for any researcher that is able to \u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eBypass Backblaze's \u003ca href=\"https://www.backblaze.com/blog/object-lock-data-immutability\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eenhanced ransom ware protection\u003c/a\u003e and break \u003ca href=\"https://help.backblaze.com/hc/en-us/articles/360052973274-Object-Lock-FAQs\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eobject lock.\u003c/a\u003e \u003c/li\u003e\n\u003cli\u003eDemonstrate a way to delete files prior to the object lock expiration.\u003c/li\u003e\n\u003cli\u003ePermanently delete files so that they are not available in the version history and bypass the 30 day, 1 year or forever file \u003ca href=\"https://www.backblaze.com/version-history.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eretention policies.\u003c/a\u003e\n\u003c/li\u003e\n\u003c/ul\u003e","industryTagId":"95db792c-091b-4c81-8d72-b09b1d065f09","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of Backblaze not listed in the targets section is out of scope. Security configuration changes to well known protocols such as email or DNS are not in scope. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Backblaze, you can report it here. However, be aware that it may not be eligible for rewards or points-based compensation.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTarget Information:\u003c/h2\u003e\n\n\u003cp\u003eSecurity is a top priority at Backblaze. If you believe you've found a security bug in our service, we are happy to work with you to resolve the issue promptly and ensure that you are fairly rewarded for your discovery.\u003c/p\u003e\n\n\u003cp\u003eIf you have questions about the Backblaze service or are trying to get help with your own Backblaze account, please \u003ca href=\"https://www.backblaze.com/help.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003evisit our support page\u003c/a\u003e for assistance. Here are a few relevant resources that may come in handy while doing your research:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://www.backblaze.com/cloud-backup.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBackblaze Personal Backup Overview\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.backblaze.com/business-backup.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBackblaze Business Backup Overview\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.backblaze.com/b2/cloud-storage.html\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBackblaze B2 Cloud Storage Overview\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.backblaze.com/b2/docs/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBackblaze B2 Cloud Storage APIs\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://www.backblaze.com/blog/how-to-make-strong-encryption-easy-to-use/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eHow to make strong encryption easy to use\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch1\u003eService Scopes:\u003c/h1\u003e\n\n\u003cp\u003eThe applications and services in-scope include the following\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe Web Application (\u003ccode\u003ehttps://*.backblaze.com\u003c/code\u003e, this includes any API's used on the site through ajax calls that are public or private)\u003c/li\u003e\n\u003cli\u003ePersonal Backup Clients (Mac and Windows)\u003c/li\u003e\n\u003cli\u003eRestore Downloaders (Mac and Windows)\u003c/li\u003e\n\u003cli\u003eB2 \u0026amp; S3 API's (\u003ccode\u003ehttps://*.backblazeb2.com\u003c/code\u003e) \u003c/li\u003e\n\u003cli\u003eGit Repositories (b2-sdk-java, b2-sdk-python \u0026amp; B2 Command Line Tool)\u003c/li\u003e\n\u003cli\u003eb2dcv.com (used for custom domain validation)\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eCredentials:\u003c/h2\u003e\n\n\u003cp\u003eResearchers are not provided with equipment or credentials. However, they are free to self-register for a trial account on Backblaze using their @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://researcherdocs.bugcrowd.com/v2.0/docs/your-bugcrowdninja-email-address\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\n\u003cp\u003eDesktop applications can be accessed by logging into your account and downloading the binary's from the overview page.\u003c/p\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003cp\u003eWe are most interested in remote code execution vulnerabilities and leaks of personal information (authentication/authorization bypasses). We request that researchers focus on these critical areas.  Backblaze reserves the right to decide if an issue meets the minimum severity threshold, and whether it is a duplicate of an earlier report.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope:\u003c/h2\u003e\n\n\u003cp\u003eBackblaze, like many SaaS providers, uses third party services which are not in scope. Please report the issues directly to their respective vendors.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eHubspot - Follow the instructions on \u003ca href=\"https://bugcrowd.com/hubspot\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://bugcrowd.com/hubspot\u003c/a\u003e for issues on the following domains: \u003ca href=\"https://hub.backblaze.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://hub.backblaze.com\u003c/a\u003e, \u003ca href=\"https://trynow.backblaze.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://trynow.backblaze.com\u003c/a\u003e, \u003ca href=\"https://info.backblaze.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://info.backblaze.com\u003c/a\u003e, and \u003ca href=\"https://status.backblaze.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://status.backblaze.com\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eZenDesk - Follow the instructions on \u003ca href=\"https://hackerone.com/zendesk\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://hackerone.com/zendesk\u003c/a\u003e for issues on the following domain: \u003ca href=\"https://help.backblaze.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://help.backblaze.com\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eDocument360 - Follow the instructions on \u003ca href=\"https://document360.com/security/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://document360.com/security/\u003c/a\u003e for issues found on the following URL: \u003ca href=\"https://www.backblaze.com/docs\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.backblaze.com/docs\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eWPEngine - Follow the instructions on \u003ca href=\"https://wpengine.com/security/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://wpengine.com/security/\u003c/a\u003e for issues found on the Backblaze Blog: \u003ca href=\"https://www.backblaze.com/blog\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.backblaze.com/blog\u003c/a\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eVulnerabilities that rely on data stored in Backblaze Cloud Storage Buckets. The buckets contain data created by Backblaze customers. These URLs are of the following form, with asterisks (*) representing any string in this position, and NNN representing numerals in this position:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eFriendly URL: \u003ccode\u003ehttps://fNNN.backblazeb2.com/file/*\u003c/code\u003e\n\u003c/li\u003e\n\u003cli\u003eS3 URL: \u003ccode\u003ehttps://*.s3.*-NNN.backblazeb2.com/*\u003c/code\u003e\n\u003c/li\u003e\n\u003cli\u003eNative URL: \u003ccode\u003ehttps://fNNN.backblazeb2.com/b2api/v1/b2_download_file_by_id?fileId=*\u003c/code\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eAdditional out-of-scope issues:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eVulnerabilities for the following domain(s) are accepted but not eligible for a reward: \u003ccode\u003eir.backblaze.com\u003c/code\u003e and \u003ccode\u003epartnerportal.backblaze.com\u003c/code\u003e \u003c/li\u003e\n\u003cli\u003eDenial of Service (DoS) attacks that just overwhelm resources (as apposed to crash systems)\u003c/li\u003e\n\u003cli\u003eBest practice concerns not accompanied by in scope exploits  (e.g. missing HTTP headers, outdated software, etc.)\u003c/li\u003e\n\u003cli\u003eGeneric email spoofing issues\u003c/li\u003e\n\u003cli\u003eVulnerabilities in third parties using Backblaze\u003c/li\u003e\n\u003cli\u003eAny vulnerability obtained from a compromised account\u003c/li\u003e\n\u003cli\u003eVulnerabilities resulting from insecure or compromised client computers or browsers (e.g. a stolen laptop with no password, preexisting malware, etc.)\u003c/li\u003e\n\u003cli\u003eVulnerabilities which depend upon users exhibiting substandard security practices (e.g. displaying credentials in public locations, failing to log out of a shared computer, etc.)\u003c/li\u003e\n\u003cli\u003ePhysical attacks against our infrastructure, facilities, and offices\u003c/li\u003e\n\u003cli\u003eSocial engineering attacks, including those targeting employees, contractors, and vendors\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to and in compliance with this program and other applicable policies and guidelines on Bugcrowd’s sites (collectively “Bugcrowd Policies”), we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":null,"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"2a74bd4a-f945-4a73-8dc7-7caf60707ecc","name":"In Scope Targets","targets":[{"id":"c15b732e-bb9f-474d-abc7-e3fd6f4e84df","uri":"https://play.google.com/store/apps/details?id=com.backblaze.android\u0026hl=en_US\u0026gl=US","name":"Backblaze Android mobile application","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bd15d5a5-c2f9-44ff-834b-ef258735cfe0","sortOrder":0},"sortOrder":0,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"c15b732e-bb9f-474d-abc7-e3fd6f4e84df"}],"recentChangeFlags":null},{"id":"7f693414-8b8f-448d-a017-0157475b3314","uri":"https://apps.apple.com/us/app/backblaze/id628638330","name":"Backblaze iOS mobile application","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"91eaabb1-4e0c-45cc-a99d-25e8f6868b24","sortOrder":0},"sortOrder":0,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"7f693414-8b8f-448d-a017-0157475b3314"}],"recentChangeFlags":null},{"id":"0e63a322-ea54-4c45-bad2-5b475b4850ad","uri":"","name":"Mac Personal Backup Clients","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1a614110-1281-4006-b145-55d0f0f5d4d8","sortOrder":0},"sortOrder":0,"tags":[{"id":"c5df6ad0-33b4-40ac-b6dd-8d4038997d40","name":"macOS","targetId":"0e63a322-ea54-4c45-bad2-5b475b4850ad"},{"id":"fc8162a2-8e37-4a27-8cbd-3b40e7799f4e","name":"Desktop Application Testing","targetId":"0e63a322-ea54-4c45-bad2-5b475b4850ad"}],"recentChangeFlags":null},{"id":"d6680abb-ce61-49b5-b9c9-eeb795a52de6","uri":"","name":"Windows Personal Backup Clients","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"960cddfd-a002-4d18-8847-d4586faacaad","sortOrder":0},"sortOrder":0,"tags":[{"id":"9c63a0f4-0db6-40da-85f0-65d0aa72bfbe","name":"Windows","targetId":"d6680abb-ce61-49b5-b9c9-eeb795a52de6"},{"id":"fc8162a2-8e37-4a27-8cbd-3b40e7799f4e","name":"Desktop Application Testing","targetId":"d6680abb-ce61-49b5-b9c9-eeb795a52de6"}],"recentChangeFlags":null},{"id":"42aac35e-e4aa-4502-90ae-267204a3e514","uri":"","name":"Mac Restore Downloaders","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"db210d3b-eb3d-467c-89a2-61f2afb5495d","sortOrder":0},"sortOrder":0,"tags":[{"id":"c5df6ad0-33b4-40ac-b6dd-8d4038997d40","name":"macOS","targetId":"42aac35e-e4aa-4502-90ae-267204a3e514"},{"id":"fc8162a2-8e37-4a27-8cbd-3b40e7799f4e","name":"Desktop Application Testing","targetId":"42aac35e-e4aa-4502-90ae-267204a3e514"}],"recentChangeFlags":null},{"id":"0d4e2dbc-1fc0-4dcd-8dbd-079ee3465ce0","uri":"","name":"Windows Restore Downloaders","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7ac0c391-0820-424b-98c1-47c278ac8330","sortOrder":0},"sortOrder":0,"tags":[{"id":"9c63a0f4-0db6-40da-85f0-65d0aa72bfbe","name":"Windows","targetId":"0d4e2dbc-1fc0-4dcd-8dbd-079ee3465ce0"},{"id":"fc8162a2-8e37-4a27-8cbd-3b40e7799f4e","name":"Desktop Application Testing","targetId":"0d4e2dbc-1fc0-4dcd-8dbd-079ee3465ce0"}],"recentChangeFlags":null},{"id":"651eeca6-2e47-4f51-bd4c-76f3ee359c1b","uri":"","name":"Git Repositories (b2-sdk-java \u0026 B2 Command Line Tool)","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b0e5bfdf-5245-4e05-a72d-42921980dd45","sortOrder":0},"sortOrder":0,"tags":[{"id":"20f6988d-5b8c-41bb-9ca8-d9b271b7874d","name":"Github","targetId":"651eeca6-2e47-4f51-bd4c-76f3ee359c1b"},{"id":"d58504e3-97f9-45ef-95aa-4a413a07190c","name":"Static Code Analysis","targetId":"651eeca6-2e47-4f51-bd4c-76f3ee359c1b"}],"recentChangeFlags":null},{"id":"60ca7846-2b21-4998-959e-067a2c2bb9e1","uri":"https://*.backblazeb2.com","name":"B2 APIs (*.backblazeb2.com)","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6c8f02b8-a051-4ae0-801e-336f981493ae","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"60ca7846-2b21-4998-959e-067a2c2bb9e1"}],"recentChangeFlags":null},{"id":"7f47c706-80c6-4e20-9a01-0a48c62ca895","uri":"https://backblaze.com","name":"Backblaze Website (*.backblaze.com)","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"11fd9047-33e0-4cb1-9faa-ef703619e14a","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"7f47c706-80c6-4e20-9a01-0a48c62ca895"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"7f47c706-80c6-4e20-9a01-0a48c62ca895"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"7f47c706-80c6-4e20-9a01-0a48c62ca895"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7f47c706-80c6-4e20-9a01-0a48c62ca895"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"6ebd328a-839f-496f-8b73-c4bd6794fc36","p1MaxCents":650000,"p1MinCents":500000,"p2MaxCents":500000,"p2MinCents":250000,"p3MaxCents":250000,"p3MinCents":150000,"p4MaxCents":150000,"p4MinCents":50000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":1500000},"descriptionHtml":null,"rewardRangeData":{"1":{"min":5000,"max":6500},"2":{"min":2500,"max":5000},"3":{"min":1500,"max":2500},"4":{"min":500,"max":1500},"5":{"min":null,"max":null},"programMax":15000},"recentChangeFlags":null}],"resources":[{"id":"ad4594be-2b5d-4e2c-9c0e-36559ff03bf4","attachmentPath":"https://bugcrowd.com/engagements/backblaze/attachments/ad4594be-2b5d-4e2c-9c0e-36559ff03bf4","name":"backblaze-download.png","filename":"backblaze-download.png","description":null,"icon":"fileImage","size":205737,"sizeLabel":"201 KB","uploadedAt":"7 Aug 2024","fileType":"Image","embedUrl":"https://bugcrowd.com/engagements/backblaze/attachments/ad4594be-2b5d-4e2c-9c0e-36559ff03bf4"}],"engagement":{"id":"5c9cc076-3966-4d35-a9d1-a43e1a10c2ca","code":"backblaze","state":"in_progress","endsAt":null,"bountyId":"888d6dec-7d0c-40aa-a39a-1b8d8d0e5648","startsAt":"2020-11-24T18:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Cloud","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/9764/5768/5322bd2e/f740efd2c7fbdae04a8751433a567d2c_5bNX_lVF_400x400.png","logoBackgroundColor":"#a90f0f","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2020-11-24T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/backblaze","changelogs":"/engagements/backblaze/changelog","submissions":null,"announcements":"/engagements/backblaze/announcements","hallOfFame":"/engagements/backblaze/hall_of_fames","crowdstream":"/engagements/backblaze/crowdstream"},"announcementsCount":4,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/backblaze/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=backblaze\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/backblaze/engagement_subscribers","engagementChangelogsUrl":"/engagements/backblaze/changelog","publishedAt":"2024-08-30T13:59:02.041Z","engagementChangelogUrl":"/engagements/backblaze/changelog/0230409e-f2a3-4d54-9094-599f0551ab1d","createUserFeedbacksUrl":"/engagements/backblaze/feedbacks","engagementCrowdstreamUrl":"/engagements/backblaze/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}