News for hackers. Stuff that matters.
Re:$36k Google App Engine RCE by foepys on Monday May 21, 2018 @10:44AM (#17118741)
That's pretty advanced stuff for an 18y/o, even for most senior developers. No doubt Google will try to recruit him after he finishes university.
Re:$36k Google App Engine RCE by jcims on Monday May 21, 2018 @02:19PM (#17120476)
(Edit: I appear to be a broken record) I spent a spell on a bug bounty program. There are some beasts out there in the 16-20yo age range, it's pretty crazy.
Re:$36k Google App Engine RCE by toomanybeersies on Tuesday May 22, 2018 @03:49AM (#17124328)
Their minds probably haven't been numbed by years of fixing shoddy code and writing CRUD apps yet.
Re:$36k Google App Engine RCE by madeofpalk on Monday May 21, 2018 @07:17PM (#17122621)
What I appreciated most about it (or maybe this is just his writeup skills), but how not advanced each of the things were. It was just mostly him Googling things and making random guesses at the rabbit hole until he found something.

The skill, I guess, comes in piecing it all together and consistently making good guesses.

Re:$36k Google App Engine RCE by jcims on Monday May 21, 2018 @07:47PM (#17122769)
The tenacity is as important as the skill. He knew there was a way, he just had to find it.