News for hackers. Stuff that matters.
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by anal_reactor on Thursday October 23, 2025 @05:55AM (#45680110)
Lesson: instead of being the good guy and reporting shit, just sell it on black market.
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by 2rsf on Thursday October 23, 2025 @08:53AM (#45681242)
(playing the devil's advocate here) But that's not the case- if you find someone's physical keys in the street, will try to open the neighbor's door with it? so why is it ok to use a password that you "found" to log into a site?
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by abustamam on Thursday October 23, 2025 @10:00AM (#45681909)
Curiosity. I once dropped my keys on the way to my leasing office. I searched the entire complex and office for my keys. Then I saw a guy at the mailboxes trying to open each one, one by one.* I asked if he needed help and he just said he found some keys on the ground and wanted to find out who they belonged to. They were mine. And my mailbox was in the other side of the complex so all bets were off for him anyway.

It costs next to nothing to try out a key in multiple places in the same proximity. Once you start going door to door using a random key you found, that's suspicious.

*it occurs to me now that I write this that this behavior is suspicious as well and probably illegal. He should have turned it into the leasing office.

Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by mmmlinux on Thursday October 23, 2025 @12:51PM (#45684083)
that actually maybe super illegal if they are usps mailboxes.
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by abustamam on Thursday October 23, 2025 @01:12PM (#45684301)
They... Probably are? They were my complexs mailboxes but only usps has access to them.
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by garyfirestorm on Thursday October 23, 2025 @01:30PM (#45684487)
Instructions unclear - any key I find now onwards I’ll mail it to this guys leasing office.
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by somehnguy on Thursday October 23, 2025 @10:02AM (#45681924)
I don't think the common analogy of "key to a house" makes any sense. For starters, a significant portion of people in existence aren't trying to break into your house 24/7.
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by anal_reactor on Thursday October 23, 2025 @10:34AM (#45682282)
No, it's different. I would compare it to my neighbor using a padlock with code combination. It takes 15 minutes to brute-force that. If I tell my neighbor that his padlock is shit and in response he sues me to oblivion, next time I'll just tell local thugs "hey here's the padlock, here's the code, do what you must", zero regrets, if the asshole insists on being an asshole just for the shits and giggles then so will I.
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by dylan604 on Thursday October 23, 2025 @01:20PM (#45684403)
If I don't try the keys in my neighbor's door, how will I know which neighbor they belong?
Re:Mass Assignment Vulnerability Exposes Max Verstappen Pass... by 2rsf on Friday October 24, 2025 @06:10AM (#45692936)
It's even worse, you find a key that you know belonged to your neighbor so you try it out just in case in his door.