3 ms·
No bug bounty? Major hardware company? Disaster in 3 .... 2.... 1...
by ta988 1y ago
No bug bounty? Major hardware company? Disaster in 3 .... 2.... 1...
- AlexErrant 1y agoHeh, I recently reported a bug to a pretty big healthcare company where I could simply increment the integer ID in the URL and see other patients' info. Didn't get so much as a "thank you". At least they fixed it. But I'm sure they have other vulns given how stupid this one was...
- pixl97 1y agoHell, you're probably lucky they didn't send the cops after you.