News for hackers. Stuff that matters.

A comment on United Airlines bug bounty program.

Re:United Airlines bug bounty program by emmab on Thursday May 14, 2015 @09:17PM (#9548462)
"Code injection on live systems" is not allowed? what does this even mean?

If I put ?param=' and it crashes with an SQL error have I performed code injection on a live system?

[ Parent | on HN ]
Re:United Airlines bug bounty program by ludamad on Thursday May 14, 2015 @10:50PM (#9548729)
Well in that case they'd presumably have a log and they would see no suspicious payload.
[ Parent | on HN ]