4 ms·
> Pretty radical, eh? Send money to: lcamtuf@coredump.cx How to send money to your email address? Not that I would send you some, but I wondered how you want t
by tomw1808 10y ago
> Pretty radical, eh? Send money to: lcamtuf@coredump.cx
How to send money to your email address? Not that I would send you some, but I wondered how you want to have that money received?
- ninjakeyboard 10y agoemail money transfer should work fine aka Interac E-Transfer. see http://interac.ca/en/interac-e-transfer-consumer.html http://interac.ca/en/interac-e-transfer-consumer.html
- srhngpr 10y agoOnly in Canada :)
- deleted 10y ago[deleted]
- tener 10y agoPayPal?
- nerevarthelame 10y agoHe\she isn't actually expecting payment, just as they don't really think that the trick is "pretty radical." It's just a mildly amusing way of providing contact information.
- JoblessWonder 10y agoIt is pretty radical in the 80's-90's sense of the word.[0] [0] http://img03.deviantart.net/ebd4/i/2015/166/9/6/radical_dude_by_olita426-d8xh8qk.jpg http://img03.deviantart.net/ebd4/i/2015/166/9/6/radical_dude...
- STRiDEX 10y agoI assume paypal when i see an email.
- mrb 10y ago1. Most Gmail users can receive money by email (https://support.google.com/mail/answer/3141103 https://support.google.com/mail/answer/3141103 and coredump.cx MX records point to Gmail) 2. Ask him his Bitcoin address 3. Paypal to this address :)
- qz_ 10y agoIsn't Google Wallet ded?
- mrb 10y agoNo. I use it occasionally.
- smhenderson 10y agoNo, just pining for the fjords! But seriously, no, it's alive and kicking... https://www.google.com/wallet/ https://www.google.com/wallet/ Page Info shows the last modification was: Thu 31 Mar 2016 01:02:44 PM EDT I don't personally use it much but I have an account to pay for my domain name though them that I use for Google Apps.
- chipperyman573 10y agoOnly google card, the debit card that was attached to GW.
- Viper007Bond 10y agoNope! I pay my rent using it for example.
- ftvbffg 10y agoYou don't need to ask him for Bitcoin address. Just send him private key of a bitcoin wallet. Or this https://www.bctip.org/en/ https://www.bctip.org/en/
- mrb 10y agoYou are perfectly right. As a matter of fact I have done this in the past—written a brainwallet passphrase on a birthday card :)
- 45h34jh53k4j 10y agoNot to be rude, but in the USA (where SWIFT or bank wire transfers can be expensive) an email address as a recipient of an online fund transfer is a pretty common; ie: paypal, venmo, chase quickpay now specifically in this case, lcamtuf (at google security) is joking and doesn't want your money. this hack is actually pretty crazy - an arbitrary HTML / jpeg polyglot file that fooled a browser could be used for js injection, say from a site that allowed jpeg file uploads, and validated mime type.
- bluesmoon 10y agoThis has been done in the past. I remember seeing an advisory as far back as 2010, but at the moment can only find these two more recent advisories: https://websec.io/2012/09/05/A-Silent-Threat-PHP-in-EXIF.html https://websec.io/2012/09/05/A-Silent-Threat-PHP-in-EXIF.htm... https://blog.sucuri.net/2013/07/malware-hidden-inside-jpg-exif-headers.html https://blog.sucuri.net/2013/07/malware-hidden-inside-jpg-ex... The way we protected ourselves against it at <earlier company> (since we allowed image uploads at a variety of locations) was to decode and recode the image before storing and strip out comments.
- 45h34jh53k4j 10y agoI agree transcoding all user content is a must, but even that can be dangerous :-) as with ImageTragick which lcamtuf discussed here: https://lcamtuf.blogspot.com/2016/05/clearing-up-some-misconceptions-around.html https://lcamtuf.blogspot.com/2016/05/clearing-up-some-miscon...
- cwkoss 10y agoJust put it in a JPEG and send it over.