Leaking the email of any YouTube user for $10,000

Re:Leaking the email of any YouTube user for $10,000 by ufmace on Wednesday February 12, 2025 @05:00PM (#43030206)

There's an easy way to put your money where your mouth is here. Just offer $11k for this or similar vulnerabilities out of your own pocket, and then resell them. If there really is a large and active market for this at higher dollar values, you'll make a killing!

Sure is funny there's nobody doing that despite so many people being so dead certain there's an active market.

[ Parent | on HN ]

Re:Leaking the email of any YouTube user for $10,000 by wepple on Thursday February 13, 2025 @10:55AM (#43037172)

If I did, would you know?

And if I did, it wouldn’t stop people from doing co-ordinated disclosure either, would it? Same with high end exploits - some folks do co-ord disclosure because it feels good and is great for your CV; others sell gray market and we generally have no idea what’s being traded.

(With the exception of say, zerodium or 0xcharlie’s various talks)

[ Parent | on HN ]

Re:Leaking the email of any YouTube user for $10,000 by tptacek on Thursday February 13, 2025 @03:30PM (#43040911)

Which of "0xcharlie's various talks" addresses the likelihood of your being able sell a web authz information leak bug on a Google site for bitcoin?

[ Parent | on HN ]