Re:Hackers take over prominent Twitter accounts in simultane...
by the797979 on Thursday July 16, 2020 @02:12AM
(#23856299)
I found a bug (not security bug) in an apparel companies website allowing unlimited reuse of their £10 of vouchers.
I reported and got a free t-shirt :)
Re:Hackers take over prominent Twitter accounts in simultane...
by ithkuil on Thursday July 16, 2020 @04:15AM
(#23856902)
If you can exploit it to make economic damage, would that count as a security bug?
Re:Hackers take over prominent Twitter accounts in simultane...
by bostik on Thursday July 16, 2020 @05:58AM
(#23857390)
Taken to logical extreme, that would make any black PR or reputational attack a security vulnerability.
Infosec is certainly a hefty part of business continuity, but business continuity itself is a much wider topic.
Re:Hackers take over prominent Twitter accounts in simultane...
by tgsovlerkhgsel on Wednesday July 15, 2020 @10:58PM
(#23855253)
I'd say it's a bug, but not a security bug.
Someone bragging about finding Zalgo in a SERP would not impress me when reading resumes.
Re:Hackers take over prominent Twitter accounts in simultane...
by Thorrez on Thursday July 16, 2020 @02:27AM
(#23856377)
You can still blog about it.
Re:Hackers take over prominent Twitter accounts in simultane...
by joeyrideout on Thursday July 16, 2020 @08:33AM
(#23858311)
I agree with their assessment. No sensitive data's confidentiality or integrity was impacted, and no availability impact to users.
I reported that you could use this to basically block out the serp and they said it wasn't a bug then fixed it.. I was hoping for a t shirt at least..
Now I wished I would've abused it and blogged about it for the resume.