ic4l

8 ms·

31.
Imgix Major Outage(status.imgix.com)
1 points by ic4l 5y ago|0 comments
32.
by ic4l 5y ago
I second this, Hasura is a solid choice.
33.
by ic4l 6y ago
If anyone wants to read the first HN thread 6 months ago about the termination it's here https://news.ycombinator.com/item?id=24988301
34.
by ic4l 6y ago
I opened my 5 cards across the span of 13 years, and was advised to have more credit cards as only having 1 was negatively impacting my credit score. According to Experian the average American has 4 credit cards. Also chase incentivizes you
35.
by ic4l 6y ago
Actually the score already crashed at that point. It was around 620 by the time I got around to opening new cards. I think the crash was mainly due to the length of my average active credit history going from 10 years to 0 years, as I reall
36.
What happens after a bank closes all of your credit cards?(chadscira.com)
85 points by ic4l 6y ago|133 comments
37.
by ic4l 6y ago
I have to always do this to pass those hotel wifi login portals. What I will do is spoof my mac address to match my laptop, and then pass the login wall to create a session. Then restore the original mac address, and then I can finally use
38.
by ic4l 6y ago
very odd, here is the original when it was published https://web.archive.org/web/20200103170008/https://tjcx.me/p...
39.
by ic4l 6y ago
It is great to see them giving out real rewards. It is a big change from when I reported issues back in 2012[1] with them on the starbucks.com domains. They were very nice though, and did let me keep a $200 credit which was quite rare at th
40.
by ic4l 6y ago
Before I proceeded to confirm that this was indeed a massive issue they said this to me: "Can you also confirm if this allows additional points to become available for use?" This was why I had to remove the negative points, and ma
41.
by ic4l 6y ago
Many things could have happened but they didn't. The entire experience with Chase while I was assisting them was very positive, and they even mentioned something about putting me on their upcoming researcher leaderboard. Since chase is
42.
by ic4l 6y ago
Or maybe just be allowed to return to the pizza shop in the future, and keep ordering pizzas.
43.
by ic4l 6y ago
This could be possible as well, because they never gave me any information.
44.
by ic4l 6y ago
This is very hard because the actual research required you to use real accounts, and you would need to contact them to correct your account after you proved it was indeed an issue.
45.
by ic4l 6y ago
This was the original reason why I wanted to report it, also the fact that I really liked chase at the time. They were one of the first companies to have solid mobile banking.
46.
by ic4l 6y ago
This termination did not happen instantly. The account was brought back to normal well before the termination of all of our accounts. I also expected them to have automatic triggers, but at the time they did not.
47.
by ic4l 6y ago
They said it was intentional but did not state why, and said that they could not tell me why. From what I understand they can close your accounts for any reason.
48.
by ic4l 6y ago
They had one a few months after https://responsibledisclosure.jpmorganchase.com/hc/en-us
49.
by ic4l 6y ago
Even their newly developed responsible disclosure program doesn't have bounties. You would think out of all people a bank would have deep enough pockets to afford a proper bounty program, as well as treat researchers well.
50.
by ic4l 6y ago
I'm sure they would send a Debt Collector after me if I had any balances on my credit cards. Back when this originally happened they gave me 60 days for the credit cards, and 30 days for the checking/savings account.
51.
by ic4l 6y ago
I agree, especially with risky parties like banks, or government institutions. It's always a scary experience. The funny thing is according to them I was the only contributor from 2016 to the end of 2017. So they must not get many repo
52.
by ic4l 6y ago
I gave them a detailed report of everything, and the $5,000 USD, and the remaining 4,500,000 rewards points were returned. The only compensation I received with this whole situation was the termination of my accounts, and a family members a
53.
Disclosure: Unlimited Chase Ultimate Rewards Points(chadscira.com)
1181 points by ic4l 6y ago|252 comments
54.
by ic4l 6y ago
Due to fear of retaliation I decided initially not to share this story, but enough time has passed, and I feel the security community should know how one of the largest banks treats security researchers.
55.
by ic4l 7y ago
As they say "ignorance is bliss"
56.
by ic4l 7y ago
I have been confused about this 2-3% figure since they started using it... I mean they are not factoring in the lag-time. It seems like they just are taking all the new patients, and not calculating it correctly. I expect this number to gro
57.
by ic4l 7y ago
But the truth is you should always treat your environment as untrustworthy. I don't think you should deduct him points for blocking his webcam. It is an ADDITIONAL privacy step. He runs a company with thousands of employees, and with a
58.
by ic4l 7y ago
Not sure who downvoted you. But I agree 100% with this, he is a high value target.
59.
by ic4l 7y ago
It's still a mobile website, so they can just use a VPN to access it.
60.
by ic4l 7y ago
Are they including the billionaires in their statistics, and dividing the total sum by the population!?

More ›