Re:Millions of Accounts Vulnerable Due to Google's OAuth Flaw
by dylan604 on Tuesday January 14, 2025 @12:19PM
(#42700383)
$1337 is a very curious amount. Surely, someone was being clever???
Re:Millions of Accounts Vulnerable Due to Google's OAuth Flaw
by chasemiller on Tuesday January 14, 2025 @12:33PM
(#42700634)
yeah, google likes to have fun with the Bug Bounty program. See: https://bughunters.google.com/about/rules/google-friends/662...
Re:Millions of Accounts Vulnerable Due to Google's OAuth Flaw
by dylan604 on Tuesday January 14, 2025 @01:41PM
(#42701788)
it's funny that all of the soul has not been sucked out of the entire company
Re:Millions of Accounts Vulnerable Due to Google's OAuth Flaw
by mega_dingus on Tuesday January 14, 2025 @12:37PM
(#42700700)
It's leetspeak
It spells "leet" - see https://en.wikipedia.org/wiki/Leet
You're too young to have used BBSes :)
I can _kinda_ see that, I agree they should mitigate it as best as possible too though, especially since they're Google after all.
> I thought this would be the end of the story, but 3 months later, they re-opened my ticket (after my Shmoocon talk was accepted), paid a $1337 bounty, and said they were working on a fix.
Sad how the only way to get Google's attention to make enough noise about something...