News for hackers. Stuff that matters.
Re:PayPal.com XSS Vulnerability by ck2 on Monday May 27, 2013 @01:16AM (#5773543)
PayPal should have put the reward into a trust for them for a year if there were legal issues.

Kudos for them being honest with both the bug and their age regardless.

The future is probably filled with teenagers discovering things, good and bad.

Teenagers are still prosecuted as adults but legally treated as less for other responsibilities.

Re:PayPal.com XSS Vulnerability by masklinn on Monday May 27, 2013 @06:25AM (#5774127)
As x9k noted on /r/netsec (http://www.reddit.com/r/netsec/comments/1f3bt1/17_years_old_...)

* a 12 years old found a stack overflow bug in firefox's document.write, in 2010: http://www.mercurynews.com/san-jose-neighborhoods/ci_1640189... (https://news.ycombinator.com/item?id=1822117)

* "Pinkie Pie" is an anonymous teenager, he won $60k at Pwnium, and did it again at Pwnium 2

* @CimStordal, 15 (at the time), found XSS in Facebook, Apple, Google and Microsoft sites: http://www.internet-security.ca/internet-security-news-archi...

Tech has always been filled with teenagers discovering things, now more than ever. Most bounty handlers treat them as valued contributors, Paypal — as usual — shits all over everything.