News for hackers. Stuff that matters.

A comment on Facebook paid $4.5K for disclosure of my user account exploit. Parent comment

Re:Facebook paid $4.5K for disclosure of my user account exp... by waterside81 on Friday May 31, 2013 @10:12AM (#5798690)
Since you're a security pro, why do you think this is the right amount? Because of the ease/difficulty in exploiting it?

How much damage could have been done to FB's credibility if this guy had been malicious?

I suppose it's damned if you do, damned if you don't.

[ Parent | on HN ]
Re:Facebook paid $4.5K for disclosure of my user account exp... by tptacek on Friday May 31, 2013 @10:15AM (#5798714)
It's just about what Google pays for auth bypass on sensitive servers.

"How much damage could have been done" doesn't really enter into the calculation.

I'm not seeing how anyone's damned here.

[ Parent | on HN ]