News for hackers. Stuff that matters.

A comment on What Happens When You Send a Zero-Day to a Bank?. Parent comment

Re:What Happens When You Send a Zero-Day to a Bank? by tptacek on Friday April 21, 2017 @10:43PM (#14170865)
Whether you run a bug bounty or not, there are now hundreds of people in Asia and Eastern Europe who hope to make $500 every time they find a page without X-Frame-Options set. A lot of them have pirated Burp Suite and are hoping to simply cash in on the scanner output.
[ Parent | on HN ]
Re:What Happens When You Send a Zero-Day to a Bank? by dsacco on Saturday April 22, 2017 @12:47PM (#14173356)
I used to manage a bug bounty for a bank. It's nightmarish how accurate this is.
[ Parent | on HN ]