4 ms·
Your front door is accessible to the public. Without a fence around your yard and a guard at the gate, bad actors could get access to your front door and exploi
by K0balt 2y ago
Your front door is accessible to the public. Without a fence around your yard and a guard at the gate, bad actors could get access to your front door and exploit any number of door vulnerabilities, including a chainsaw or battering ram.
Please send me $12,000 dollars.
- sim7c00 2y agoi am sorry this was already disclosed by our internal security team. thanks for your report but you will not be eligible for the bounty payout.
- sph 2y agoThis is exactly what happens whenever you publish a website online, with so called "ethical hackers" finding minor vulnerabilities, hoping to get paid for running a script. See also https://www.troyhunt.com/beg-bounties/ https://www.troyhunt.com/beg-bounties/
- shawabawa3 2y agoMy favourite one that i've seen 4 of 5 iterations of, is people claiming about a privilege escalation or authentication bypass bug, then their reproduction is a convoluted way of doing: 1. Log in with admin credentials 2. Copy the session cookie 3. Run curl command using above session cookie 4. You have bypassed authentication!!
- mikrotikker 2y agoTbf session tracking of browser fingerprinting can stop session hijacking
- grishka 2y agoYour end-to-end encryption is compromised because I can read the messages directly from your app's local database in plaintext on a rooted device.
- klabb3 2y agoDon't trust this person, it’s a scam. A real security consultant would have mentioned defense in depth and offered you a discount on their WAF offering.
- K0balt 2y agoThis is one of those industries that attracts cosplayers, but they expect to be paid. It gives me fake-cop-car-guy vibes. When I was growing up I worked at a record-and-tape store. One of my co-employees was a fake-cop-car guy. It was really awkward. Sometimes he would show up “in uniform” just to “check on things”. It was cringeworthy at a sphincter-clenching level.
- bradgranath 2y agoYeah, except this is closer to: "This public playground is accessible to children. Without a privacy screen, anyone could see the children, or write down a list of which equipment they played upon. Please send money."