uraniumhacker

4 ms·

1. 1.▲
   by uraniumhacker 10y ago

   The scope of Uber's bug bounty program was updated after this report was submitted so that does not count.
2. 2.▲
   by uraniumhacker 10y ago

   At the time of the exploit, there was only one check, the MX record. Also once I claimed the domain, another user cannot claim it from their account. So this could be exploited silently as well because the victimized company won't know
3. 3.▲
   by uraniumhacker 10y ago

   Hi thank you for the post. If anyone has question, feel free to reach out to me here or at uranium@uraniumhacker.tech. As a writer of this blog, I will be able to provide the feedback necessary and clear any misunderstanding/false posi