News for hackers. Stuff that matters.

A comment on Breaking GitHub Private Pages for $35k. Parent comment

Re:Breaking GitHub Private Pages for $35k by MattSayar on Tuesday April 06, 2021 @06:38PM (#26718275)
Plus just being curious. I once found an exploit in a large IAM vendor's multifactor auth flow by just playing around with the Inspect tool in my browser. I told my customer success manager and they fixed it. Too bad there was no bounty :(
[ Parent | on HN ]
Re:Breaking GitHub Private Pages for $35k by vxNsr on Tuesday April 06, 2021 @06:49PM (#26718365)
The bounty was you not having to deal the someone else exploiting it and your org having to deal with the fall out.
[ Parent | on HN ]