Re:How I Hacked Facebook and Found Someone's Backdoor Script
by frostymarvelous on Sunday April 24, 2016 @06:47AM
(#11559239)
Yet we know not all critical vulnerabilities are created equal.
That's why some get a 10k payout and others get a 2.5k.
Re:How I Hacked Facebook and Found Someone's Backdoor Script
by mamon on Sunday April 24, 2016 @09:49AM
(#11559671)
This is assessed based on how hard it was to elevate your access rights (whether it requires physical access, user cooperation, etc.), not on how much damage you can do - because once you elevated your rights the possible damage is unlimited.
Re:How I Hacked Facebook and Found Someone's Backdoor Script
by frostymarvelous on Tuesday April 26, 2016 @06:12PM
(#11576155)
Except in that case, he unearthed another completely unrelated vuln.
I agree that some actions are u ethical, but does that really matter so much when a black hat is unethical anyways? The fact that he reported meant he was harbored no malicious intent.
How is collecting logins better than that? Seriously? This is completely malicious if you ask me.
Moreover, we must not judge each case strictly to the same rule, but with a measure of consideration of the circumstances as well.
It's already a critical vulnerability. Unless you want to assign numbers to the infinity, which is ridiculous.