Reading Uber’s Internal Emails: Bug Bounty report worth $10K

Re:Reading Uber’s Internal Emails: Bug Bounty report worth $10K by mikesea on Saturday January 21, 2017 @10:16AM (#13450367)

Someone reported this same vulnerability to us via HackerOne months ago. We worked with Sendgrid support to re-claim the domain and they said they were urgently working to fix the issue, or not.

Edit: just saw this post was from September. Author probably made thousands in rewards circulating this vulnerability.

[ Parent | on HN ]

Re:Reading Uber’s Internal Emails: Bug Bounty report worth $10K by innoying on Saturday January 21, 2017 @03:34PM (#13451971)

I do not believe the author circulated this report to multiple companies, however once it was made public a number of other reporters in the community did and continued to iterate on it until SendGrid fixed the issues.

Source: I am a member of said community: https://bugcrowd.com/bored-engineer, https://hackerone.com/bored-engineer, etc

[ Parent | on HN ]