Re:Stealing private documents through a bug in Google Docs
by wolco2 on Monday December 28, 2020 @10:49AM
(#25560088)
I would stop sending these in and keep them for myself. I may trade them or sell them or write about but I wouldn't give them to google in the hopes of a payment.
Re:Stealing private documents through a bug in Google Docs
by hackerpain on Monday December 28, 2020 @11:03AM
(#25560237)
I am sorry but that can ruin your career as its illegal. You can't sell or, trade vulnerabilities on live websites like Google as per the terms and conditions of the Google VRP (Responsible Disclosure policy) while it may seem unfair, its illegal to do so.
Re:Stealing private documents through a bug in Google Docs
by traceddd on Monday December 28, 2020 @11:20AM
(#25560402)
It’s not illegal, criminally, to break terms and conditions. At least in the US.
You may have some impact on your career and be judged by your peers or perhaps brought to civil court for damages, but if done right it’s totally legal to sell exploits.
Anyway, in the past I found a way to takeover an organization account in Google cloud acquisition and they rewarded me $100, saying their "Panel" decided that, Google's VRP panel sucks, so you're right about that.