5 ms·
Happened to me in a minor way with ASCII chat characters running down the search engine results page into other results. I reported that you could use this to
by redorb 6y ago
Happened to me in a minor way with ASCII chat characters running down the search engine results page into other results.
I reported that you could use this to basically block out the serp and they said it wasn't a bug then fixed it.. I was hoping for a t shirt at least..
Now I wished I would've abused it and blogged about it for the resume.
- tgsovlerkhgsel 6y agoI'd say it's a bug, but not a security bug. Someone bragging about finding Zalgo in a SERP would not impress me when reading resumes.
- the797979 6y agoI found a bug (not security bug) in an apparel companies website allowing unlimited reuse of their £10 of vouchers. I reported and got a free t-shirt :)
- ithkuil 6y agoIf you can exploit it to make economic damage, would that count as a security bug?
- bostik 6y agoTaken to logical extreme, that would make any black PR or reputational attack a security vulnerability. Infosec is certainly a hefty part of business continuity, but business continuity itself is a much wider topic.
- Thorrez 6y agoYou can still blog about it.
- joeyrideout 6y agoI agree with their assessment. No sensitive data's confidentiality or integrity was impacted, and no availability impact to users.
- redorb 6y agoTheir number one source of revenue (search engine results page) could be defaced.