Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ScientificAmerican, why aren't you recognising white-hats?
- Last week I found several really painfull issues in large websites. Just to name a few: lifehack, okezone, nexusmods, thedailyshow, surfcanyon, hypebeast, scientificamerican, Last week I found several really painfull issues in large websites. Just to name a few: lifehack, okezone, nexusmods, thedailyshow, surfcanyon, hypebeast, scientificamerican, grazia.com.cn, smartinsights.com, playdom.com. These are all high-traffic sites, with a lot of damage possible when these issues come out. I tried to contact them by twitter, just by sending them a tweet, asking to contact me by DM. See my efforts at https://twitter.com/finlayh1. Just two outbrain.com, snapwidget.com immediately contacted me, fixed the issues, and thanked me right away. They even gave me a reward.
- What should I do with these other sites? Twitter suspended my account, Yahoo blocked access to my email account. I thought using twitter would be a kind way of notitying them, without causing any harm. But apparently they are just waiting to be a hacked and defaced......
- @twitter -> unlock my account, I'm not spamming, just warning people.
- @yahoo -> unlock my account, I'm not spamming, just warning people.
- Just to show the real harm of the issues. This is a small excerpt from the Mura cms configuration files of ScientificAmerican website.
- datasource=samura dbtype=oracle dbusername= dbpassword= dbtablespace=SAMURAWALL
- Again, I'm not in to harm others, but just want to warn them.
- Contact me at Reddit: http://www.reddit.com/user/finlayh1/
Add Comment
Please, Sign In to add comment