I joined Poland's government bug bounty 🇵🇱
My "team" was an abliterated DeepSeek V4.1 Flash running locally on 4× NVIDIA DGX Spark. Most models refuse security work by reflex, even in a legal, scoped program. This one just helped: it read code, tested ideas and drafted reports. Nothing left my own hardware.
17 reports in 2 days:
✅ 1 accepted: 4,000 PLN from
@CERT_Polska
⏳ 12 pending or under analysis
❌ 4 rejected (out of scope: no confidential data leaked, but still passed on to the affected organisation to fix)
I'm giving every złoty I earn in this round to fundraisers on Poland's biggest charity crowdfunding platform. 💚
Thanks to
@CERT_Polska, NASK, COI and the Władysławowo commune for running an open program.