News for hackers. Stuff that matters.

A comment on How I bypassed Cloudflare's SQL Injection filter.

Re:How I bypassed Cloudflare's SQL Injection filter by rasz on Friday September 18, 2020 @03:30PM (#24520954)
>I got a free t-shirt

wait, I thought "And All I Got Was This Lousy T-Shirt" was just a meme

[ Parent | on HN ]
Re:How I bypassed Cloudflare's SQL Injection filter by dutchmartin on Friday September 18, 2020 @03:55PM (#24521222)
It is not. The Dutch government also sends T-shirts to hackers that disclosed a security vulnerability[0].

[0] https://twitter.com/giovannichhatta/status/93148007899067596...

[ Parent | on HN ]
Re:How I bypassed Cloudflare's SQL Injection filter by judge2020 on Saturday September 19, 2020 @01:52AM (#24525465)
Cloudflare's bug bounty program used to be exclusively T-Shirts/swag but it looks like they now might give out service credits, it doesn't state the exact reward:

> Reporters under the age of 18 will not be eligible to receive Cloudflare service rewards

https://hackerone.com/cloudflare

[ Parent | on HN ]
Re:How I bypassed Cloudflare's SQL Injection filter by bruno207 on Saturday September 19, 2020 @03:09AM (#24525759)
Check the top:

>Cloudflare runs a private bug bounty program. If you submit a valid report on bounty-eligible assets through our disclosure program, we will transfer your report to our bug bounty program and invite you as a participant.

[ Parent | on HN ]