How we got read access on Google’s production servers

Re:How we got read access on Google’s production servers by halflings on Friday April 11, 2014 @09:32AM (#7572707)

I hope it doesn't get unnoticed that the guys who discovered this vulnerability created a really great product, Detectify :

https://detectify.com/

They also discovered vulnerabilities in many big websites (dropbox, facebook, mega, ...). Their blog also has many great write-ups : http://blog.detectify.com/

[ Parent | on HN ]

Re:How we got read access on Google’s production servers by detectifyuser on Friday April 11, 2014 @10:33AM (#7573049)

While they are probably good at doing this manually, their automated tool finds very little. And they were kind of assholes on support :(

[ Parent | on HN ]

Re:How we got read access on Google’s production servers by detectify on Friday April 11, 2014 @11:08AM (#7573288)

Sorry to hear that you are disappointed. Few results can be a good thing though, it might just mean that your site has very few issues! Feel free to mail us again and thanks for the feedback :)

[ Parent | on HN ]

Re:How we got read access on Google’s production servers by opendais on Friday April 11, 2014 @05:59PM (#7575859)

Odd, I had the opposite experience. They seemed fine to me.

[ Parent | on HN ]

Re:How we got read access on Google’s production servers by ibu on Friday April 11, 2014 @11:10AM (#7573303)

Nice try, Tinfoil.

[ Parent | on HN ]

Re:How we got read access on Google’s production servers by borski on Friday April 11, 2014 @11:23AM (#7573396)

Er...CTO of Tinfoil here. We respect the Detectify guys a lot. Not sure what you were trying to get at, but there's no conspiracy here. We don't engage in subversive competitive tactics.

[ Parent | on HN ]