Google Account Recovery Vulnerability

Re:Google Account Recovery Vulnerability by WestCoastJustin on Friday November 22, 2013 @12:04AM (#6779374)

Nice write up. While checking to see if Google's "Hall of Fame" [1] was updated yet, I noticed that their reward program is actually really active. Here are some stats compiled about the Reward Recipients and Honorable Mention pages, based off these numbers, they are dolling out a cash reward roughly every 1.8 days!

  2013
    197  Reward Recipients [1]
    168  Honorable Mention [2]

  2012
    191  Reward Recipients [1]
    147  Honorable Mention [2]
    
  2011
    121  Reward Recipients [1]
     68  Honorable Mention [2]

[0] http://www.google.com/about/appsecurity/hall-of-fame/

[1] http://www.google.com/about/appsecurity/hall-of-fame/reward/

[2] http://www.google.com/about/appsecurity/hall-of-fame/distinc...

[ Parent | on HN ]

Re:Google Account Recovery Vulnerability by peterwwillis on Friday November 22, 2013 @09:48AM (#6780971)

Back in the day, the "Hall of Fame" for this kind of exploit would be a .txt file sent to full-disclosure, detailing the exploit and sending "greetz" to your "crew" (or if you were lucky, posted in a periodical of note like Phrack).

Now the fix comes out before anyone gets harmed by it, AND the person who discovered it gets PAID for it. Whoever thought up the rewards program is keeping people safe and still giving hackers a good reason to keep hacking. The future is amazing.

[ Parent | on HN ]