Using Facebook Notes to DDoS any website

Re:Using Facebook Notes to DDoS any website by Artemis2 on Friday April 25, 2014 @06:22PM (#7649406)

They were probably aware of the issue, as this kind of bug has been already published for Google [1] (by the same author, it seems) a month ago. Also, Google did not give him a bounty reward for his discovery.

[1] https://news.ycombinator.com/item?id=7371176

[ Parent | on HN ]

Re:Using Facebook Notes to DDoS any website by chr13 on Friday April 25, 2014 @06:31PM (#7649462)

I actually found this bug first in Facebook and later in Google. Facebook said they needed time to think about this and I was hoping they would fix it, so I could not disclose this back then.

[ Parent | on HN ]

Re:Using Facebook Notes to DDoS any website by patcheudor on Friday April 25, 2014 @09:17PM (#7650019)

Join the club. I've reported it before as well, years ago. I even discussed it on my FB wall at one point with some tests against my own site. I never re-tested, figuring they'd take care of the issue. Guess not.

[ Parent | on HN ]