3 ms·
This is the type of write up that used to appear in hackernews great work
by spicyramen 6y ago
This is the type of write up that used to appear in hackernews great work
- enneff 6y agoIt is evidently the type of write up that is still posted to HN.
- spicyramen 6y agoYep less and less we see this
- phreeza 6y agoHN was never really about this kind of hacking as far as I can tell. Mostly about hackers in the broader "creative problem solving" sense.
- toong 6y agoAre those kind of explorations even legal ? I understand there was no wrong intentions, just curiosity. I want to read more about things like this, but it feels reckless on the authors part ?!
- pgo 6y agoLegal, encouraged and rewarded. Bug bounty programs allow hackers doing these kind of explorations. Although most programs advise you not to do anything once you get code execution as it might break things on production, so the final part where they started intercepting traffic might not be something I would do, but they took a calculated risk, that this is is docker container that does no critical work and it would be interesting to see if we could break out of it. So that's fine. You can read up more of such reports at hackerone.com/hackitivity or just searching about bug bounty writeups for X organization