3 ms·
I bet Blackhat Vulnerability Program would've payed lot more.
by tommi 14y ago
I bet Blackhat Vulnerability Program would've payed lot more.
- kmfrk 14y agoOf course it would. That's the idea of blackhat.
- lucian303 14y agoYeah, the OP is a really nice person. Because FB doesn't deserve this, not for $3.5k, maybe for $35k but more for around $350k to $3.5m. Guaranteed by contract.
- tptacek 14y agoFor XSS? No.
- xSwag 14y agoWith CPA + FB traffic on such a large scale, one could easy make $50k+ in a week with multiple CPA networks.
- tptacek 14y agoKnowing what little I do about the market for browser code execution vulnerabilities, I am very skeptical that there is a black hat market that pays 5 figures for XSS.
- deleted 14y ago[deleted]
- tptacek 14y agoIf you have evidence of a market that pays 5 figures for XSS, I'd sure be interested in hearing about it.
- raverbashing 14y agoDo they give you a CC number you can use as much as you want?
- rmc 14y agoThat goes against some people's conscience and they would find it immoral to do the wrong thing. (i.e. you won't get that warm fuzzy feeling of doing the right thing with the blackhat market)