4 ms·
Interesting, Twitter $5,040 bounty to the vulnerability reporter. I've heard it said that website vulnerabilities aren't valuable and thus don't merit large bou
by Thorrez 4y ago
Interesting, Twitter $5,040 bounty to the vulnerability reporter. I've heard it said that website vulnerabilities aren't valuable and thus don't merit large bounties. But if a single copy of the database can be sold for $30k (I'm not sure it actually will), then this is a case of a bounty for a website vuln being much too small.
- spoonjim 4y agoThere are a lot of ways to monetize it. Run 2FA attacks on celebrity accounts' phone numbers, dox anon accounts that post racist stuff or follow gay porn and blackmail them, etc etc.
- nickcox 4y agoHow would one make money out of doxing racists?
- spoonjim 4y agoCall them, tell them you'll publish an expose with their real name and get them fired from their job unless they pay you $5k.
- ALittleLight 4y agoI don't think that would work. You only get cancelled if you catch the eye of a social media mob. If it's just some random person complaining that X is a racist then I'd bet X's employer would side with X. "No, trust me - I hacked into Twitter and this anime avatar who says racist things is totally your employee. Hello? Hello?" You could threaten to call up a random person's employer and call them a racist unless they paid you. Seems as likely to work as this would be. You would need someone high profile enough to get the attention of a social media mob to really threaten people.
- spoonjim 4y agoYou don't need to get the person fired - you need to get them afraid of potentially being fired. Not everyone will do a rational takedown like this, and if they do, you have millions of accounts to dox.
- jokethrowaway 4y agoIt took one tweet from a random user (@fionafranfeld) to get bodega bro cancelled from his tech job in New York at @outreach_io https://youtu.be/gIraad4RrRw?t=190 https://youtu.be/gIraad4RrRw?t=190
- ALittleLight 4y agoYes, but only because it got social media attention. If it was just one guy offended by bodega bro then nothing would've happened.
- seanhunter 4y agoThe standard black hat data dump monetization scheme (I have been told) is to just try logging in with the same creds at a bunch of banks. Lots of people reuse passwords and you don’t need that many hits to recoup the money.