News for hackers. Stuff that matters.

A comment on “We found PayPal vulnerabilities and PayPal punished us for it”. Parent comment

Re:“We found PayPal vulnerabilities and PayPal punished us f... by tptacek on Monday February 24, 2020 @11:52AM (#22405722)
They "clearly aren't up to the responsibility"? Paypal has one of the larger application security teams in SFBA. You've decided they're not qualified because someone reported a self-XSS and Paypal didn't freak out?

Did you read downthread about the actual "2FA" feature this team "bypassed"?

[ Parent | on HN ]
Re:“We found PayPal vulnerabilities and PayPal punished us f... by rasengan on Monday February 24, 2020 @12:15PM (#22405988)
> Paypal has one of the larger application security teams in SFBA.

It's not the size that matters, but how you use it that counts.

[ Parent | on HN ]