HackerOne bounty amounts revision

[Changaco]

Liberapay's HackerOne program was launched in 2018 (liberapay/liberapay.com#549), and I don't think the bounty amounts have been changed since. Liberapay has significantly more income now than it did then, so we could increase the bounty amounts.

@karelorigin has proposed a simple doubling of the current amounts. Are there any other proposals? @EdOverflow?

(The best time for a significant update of the HackerOne program would probably be after Liberapay migrates away from AWS and SQL, as there will be a greater need for reviews of the new infrastructure's security. However, that would mean waiting quite a while, as the work to make that migration possible is nowhere near complete.)

[EdOverflow]

I agree with @karelorigin that doubling the current ranges is a step in the right direction. This may encourage some of the more reputable hackers on the platform to review Liberapay.

[karelorigin]

@Changaco since you have a better understanding of Liberapay's budget, I'd suggest taking it as a minimum. I think a more is better approach is generally preferred when it comes to bounties.

[Changaco]

I don't think the bounty amounts have been changed since.

Actually, I changed them last year, so almost all of the maximum amounts have already been doubled.