3 ms·
Quote from blog post[1] dated 14th June: I really did not get anything for this bug, and I know I'm probably forfeiting an acknowledgement too right n
by scottydelta 8y ago
Quote from blog post[1] dated 14th June:
I really did not get anything for this bug, and I know I'm probably forfeiting an acknowledgement
too right now. But I wasted alot of time on this bug, and nobody but me should be able to decide
what to do with it. People who criticize this type of behavior I find frankly annoying.
I used to be one of those self-righteous types, but I'm also pretty annoying, so perhaps there is a correlation.
Besides, this bug is way to silly in its complexity to be of any use to anyone.
I would not drop a full 0day exploit, which I can assure you,
I have totally sitting on my hard drive (not referring to this bug :).
For the people wondering why she released the exploit instead of claiming bounty on it, in the blog post[1] dated 14th June, she said she would not drop a full 0day exploit. I guess that changed when she did not get credit for her last bug (cve-2018-8314) according to her another blog post[2] from Aug 17th.
[1] https://sandboxescaper.blogspot.com/2018/06/using-filepickers-to-escape-sandboxes.html https://sandboxescaper.blogspot.com/2018/06/using-filepicker...
[2] https://sandboxescaper.blogspot.com/2018/08/all-good-things-must-come-to-end.html https://sandboxescaper.blogspot.com/2018/08/all-good-things-...
- jplayer01 8y agoMan, code blocks are insufferable to read on a phone.
- nailer 8y agoFixed: > I really did not get anything for this bug, and I know I'm probably forfeiting an acknowledgement too right now. But I wasted alot of time on this bug, and nobody but me should be able to decide what to do with it. People who criticize this type of behavior I find frankly annoying. I used to be one of those self-righteous types, but I'm also pretty annoying, so perhaps there is a correlation. > Besides, this bug is way to silly in its complexity to be of any use to anyone. I would not drop a full 0day exploit, which I can assure you, I have totally sitting on my hard drive (not referring to this bug :).