News for hackers. Stuff that matters.

A comment on Google promised its contact tracing app was completely private, but it wasn’t. Parent comment

Re:Google promised its contact tracing app was completely pr... by two_handfuls on Tuesday April 27, 2021 @07:33PM (#26963445)
I've seen this described as "the security vulnerability is on the other side of the airtight door", which I found was both poetic and apt. It's apparently pretty common in bug bounty submissions.
[ Parent | on HN ]
Re:Google promised its contact tracing app was completely pr... by UncleMeat on Wednesday April 28, 2021 @08:25AM (#26968539)
Replace "apparently" with "definitely".

The number of bounty submissions that I've seen which come in the form of "I can read a program's private data using root" is too high to count.

[ Parent | on HN ]