3 ms·
It's insultingly low. Auth bypass is easily worth 5 or 6 figures if you can use it to transfer money.
by driverdan 12y ago
It's insultingly low. Auth bypass is easily worth 5 or 6 figures if you can use it to transfer money.
- onewaystreet 12y agoYou overestimate the value of these bugs to the black market. There is no shortage of hacked PayPal accounts for sale on the various dark net markets because the hard part is getting money off the accounts. PayPal will flag a transfer for a dozen different reasons. If you don't login to the hacked account from an IP close to the location of its owner; if you immediately attempt to transfer money off the account to a bank account; etc.