sn4pp

34 ms·

1. 1.▲
   by sn4pp 7y ago

   I'm sorry, won't do that, don't know why. I'm pretty sure there something like computer abuse act. If you don't follow their rules, how would it be legal to hack on their servers?
2. 2.▲
   by sn4pp 7y ago

   Hacking PayPal is a crime tho'. Except for when you play their game, which means: submit bugs via h1 and only disclose if they allow.
3. 3.▲
   by sn4pp 7y ago

   I'm not talking about this case specifically. At least Paypal was notified before the public disclosure!
4. 4.▲
   by sn4pp 7y ago

   > but disclosing bugs publically is an addition to your resume Request disclosure on hackerone then. Idk, breaking the law to get a job doesn't seem ok to me.
5. 5.▲
   by sn4pp 7y ago

   Oh so an N/A dupe? That sounds plausable.
6. 6.▲
   by sn4pp 7y ago

   > I would actively, publically, and immediately disclose bugs that affect anybody who is a client of HackerOne. Sadly you can't feed your children from media drama. Maybe, in the long run, but it's more likely to get sued.
7. 7.▲
   by sn4pp 7y ago

   > They deemed this issue a Duplicate, and we lost another 5 points. A dupe costs points?! On bugcrowd you GET points for dupes...
8. 8.▲
   by sn4pp 7y ago

   "forced telemetry" is very wrong. Let's see how long it takes until that is illegal in your country.
9. 9.▲
   by sn4pp 7y ago

   Just got scammed on one of those smaller sites, f it, I'll buy on amazon so I atleast get anything shipped to me.
10. 10.▲
    by sn4pp 7y ago

    Seems to be good for stuff like api_key="[a-z0-9]+" Ty