4 ms·
Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway
by tedk-42 4mo ago
Hmmm 12K seems like a bit much, even if it's fintech.
They also didn't mention the company.
The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it.
And who hosts on blogspot...
- savolai 4mo agoIt's not really fair to criticise hosting choice, but this lead me down a rabbit hole. Noticed that non-responsive blog layouts are rare these days. Most are from blogspot. So I took a look and realized that blogger nowadays actually supports responsive layouts, but apparently... they are not popular? https://blogger.googleblog.com/2017/03/share-your-unique-style-with-new.html https://blogger.googleblog.com/2017/03/share-your-unique-sty...
- Kwpolska 4mo agoGoogle barely maintains Blogger, and people have old blogs with old templates they never felt the need to change.
- Quarrelsome 4mo agogot any more criticisms, font choice, perhaps there's some duplication in their css? I think 12k could be fine given how much it might have cost them if nobody had noticed.
- rithdmc 4mo agoOr if someone with malicious intent noticed.
- utf_8x 4mo agoConsidering it let them do an unauthorized wire transfer from a system account, 12k seems pretty reasonable.
- treszkai 4mo agoYes, it and the other three posts sound positively AI written. The first post on the blog is how OP uploaded a backdoored dataset to HuggingFace and left it there for 6 months – whether made up or not, it doesn't sound great.
- sillysaurusx 4mo agoWhy not? This is arguing for style over substance. The goal is to explain how a bug impacts the company. Anything that achieves the goal is de facto good. Remember, the alternative is for the company not to be notified at all.
- oasisbob 4mo agoStyle, and the effort an author put into their writing are both legitimate targets of rhetoric, analysis, and criticism.
- sillysaurusx 4mo agoThey got $12k for their work. Their writeup was fine.
- hdndjsbbs 4mo agoI clicked on the post and immediately bounced off because it was intense slop. Like a high schooler padding out their essay to hit a word count. I don't care if they got paid for it. It's an interesting misconfiguration that you can describe in one sentence. I don't need to read the corresponding 500 word blog post.
- varispeed 4mo agoExactly. What do these researchers think? Getting rich finding security flaws? They should get $5 at best, buy themselves chocolate bar and an orange juice and be grateful for the opportunity bestowed upon them by the rich.
- paulryanrogers 4mo agoOJ here is over $5. Chocolate bars are not far behind. Of course I'm not complaining. Our kleptocrat overlords are doing great works!