5 ms·

> This time, the bug gives the attacker full access to every website ever visited by the victim. That means in addition to turning on your camera, my bug can al

• londons_explore 5y ago
  This bug would, in the wrong hands, let someone steal a lot more than $100k.
  • cortexio 5y ago
• mhoad 5y ago
  Agreed, of all the places you could have sold that information the official channel by FAR pays the worst (Apple in particular being a notoriously terrible company to deal with for security problems but by no means are the only ones) which is a huge problem that people should be making a lot more noise about. I kind of shudder to think of how many of these bugs have been out there for years and only ever ended up in the hands of governments and shady groups like NSO.
• kingcharles 5y ago
  I found a bug in Cash App that exposes SSNs, but their max bug bounty is $8000, so fuck 'em. The other option for people finding bugs is to sell it to "the other side" if they pay more money. https://bugcrowd.com/cashapp https://bugcrowd.com/cashapp
  • rasz 5y ago
    No. Fuck-em would be actually selling it, not throwing a hissy fit and publicly outing yourself as potential source of the discovery. They DGAF about that bug, their only concern is very low probability of negative consequences in case of data leak with full attribution, but bugcrowd presence gives CISO full ass coverage.
• tsywke44 5y ago
  It should be at least 10x higher, this bug affects a billion users