6 ms·

Wow, am I correct in reading that uber just paid out 10k for a OneLogin wordpress plugin bug? Who said open source was free...

• xyzzyz 10y ago
  There's a reason free software reminds you that it is distributed WITHOUT ANY WARRANTY in all caps.
• __s 10y ago
  Perhaps they should fund some audits of the open source projects they use. Which I suppose a bug bounty sort of does
• i336_ 10y ago
  Step 1: go to homepage Step 2: browse Step 3: profit, literally I'm considering looking around at bug bounties... I know nada about security, but who knows, maybe I'll stumble on something.
  • anentropic 10y ago
    yeah, anyone offering bug bounties and also running wordpress must be offering easy money...
• mpeg 10y ago
  Not just that, but a bug that OneLogin silently fixed over a year ago. If they knew about it, it's pretty irresponsible to not mention on their patch notes. I'm assuming they fixed it by accident?