I Found a $90k Remote Code Execution Vulnerability in Google

Re:I Found a $90k Remote Code Execution Vulnerability in Google by xnorswap on Monday October 12, 2026 @11:20AM (#50057731)

You are underestimating how much effort and prior knowledge it takes to work with claude on this kind of thing.

[ Parent | on HN ]

Re:I Found a $90k Remote Code Execution Vulnerability in Google by fishgoesblub on Monday October 12, 2026 @11:53AM (#50058222)

It really hurts the fingers to type "make no mistakes" in every prompt.

[ Parent | on HN ]

Re:I Found a $90k Remote Code Execution Vulnerability in Google by cyanydeez on Monday October 12, 2026 @11:27AM (#50057835)

I bet, I could take "Trading places" style, anyone off the street, give them a 100 "Secret" word list and they could spend 6 months discovering all sorts of things.

I agree effort and prior knowledge are required, but a few magic words is like 80% of the effort.

[ Parent | on HN ]

Re:I Found a $90k Remote Code Execution Vulnerability in Google by mindcrime on Monday October 12, 2026 @11:35AM (#50057946)

Well the first 80% is easy. It's the second 80% that really gets ya...

[ Parent | on HN ]

Re:I Found a $90k Remote Code Execution Vulnerability in Google by ctvo on Monday October 12, 2026 @03:40PM (#50061860)

OK do it. And make yourself 90K along the way.

This is the typical "ugh that's just rsync" when Dropbox was announced, but for a new LLM age.

_If it's so easy, do it_. Don't post about it. Do it. Fix these bugs at scale. Charge people money for it once you've built up a reputation. Get your own bug bounties.

[ Parent | on HN ]

Re:I Found a $90k Remote Code Execution Vulnerability in Google by jve on Tuesday October 13, 2026 @05:35AM (#50069025)

100 "Secret" word list sounds statistically more improbable than cracking your password.

[ Parent | on HN ]