dumbsecreport

Thats because a lot of it was lifted directly from the web. They paid people a stupid price per article to either write articles or copy paste documentation online while barely vetting it, only taking it down when people took the time to send in reports to staff. I'm sure things have improved since then.

thank you for providing a safe haven free of aprils fools trickery for all of us sensitive people

Yeah, if it wasn't obvious enough already, I used that number because it's the one in the headline of the article........

I really doubt DO would hire me. And any admin could look up what you said and disprove it. I'm not using any proxies or VPN.

I'm just sharing my experience of what happens when you disclose bugs responsibly.

I'd be happy to share bug tickets with anyone who isn't on some silly chill hunting crusade, for sure, despite my trollish throwaway name.

No, but they've always ripped off the site like that, either on purpose or not. It was worse when the company just came out.

I've reported multiple vulnerabilities to DigitalOcean before and they've fixed them rapidly, credited me for the effort, and gave me free time on their services.

The difference is I didn't exploit 20 thousand domains to make flashy headlines and prove a point about something that isn't even a serious bug.