Re:GitHub: Widespread Injection Vulnerabilities in Actions
by pvg on Tuesday November 03, 2020 @01:10PM
(#24982242)
It's astonishing nobody found this till 2016, given that people were stealing WoW gold with keyloggers installed though 0 day flash vulns a few years before that.
[ Parent
| on HN ]
Re:GitHub: Widespread Injection Vulnerabilities in Actions
by virtue3 on Tuesday November 03, 2020 @06:19PM
(#24985152)
I think it would be a little harder to make monetary gains off of this. You still needed to be in physical proximity to trade. I'm not sure if you had the ability to script over the mailbox and change recipients, that could have worked perhaps.
You'd get much more bang for the buck getting access to the whole account.