News for hackers. Stuff that matters.

A comment on #1 CSRF Is A Vulnerability In All Browsers. Parent comment

Re:#1 CSRF Is A Vulnerability In All Browsers by txt on Saturday March 31, 2012 @12:05AM (#3779306)
Im getting it on the same domain, but the request can be sent from any domain, as long as the user is logged in. And yeah, but they aren't offering anything that would be worth the time.
[ Parent | on HN ]
Re:#1 CSRF Is A Vulnerability In All Browsers by nbpoole on Saturday March 31, 2012 @12:45AM (#3779382)
I think I know what site you're talking about. If I'm right, they do have a security bug bounty reporting program and you should take advantage of it: it will take maybe two minutes of your time and can net you a bit of cash! :-)

(sorry for being oblique, but I have no way to contact you privately and ask you more directly!)

[ Parent | on HN ]
Re:#1 CSRF Is A Vulnerability In All Browsers by txt on Monday April 02, 2012 @06:14AM (#3787302)
I haven't made up my mind yet what to do with it but you know there are some ways of being evil without so much evil. ;]
[ Parent | on HN ]