Remix.run Logo
▲ dist-epoch 3 hours ago

This is a pet peeve of tptacek:

> server-side vulnerabilities are worth very little, because they quickly get patched.

▲dannyw 3 hours ago | parent | next [-]

The "take over any instagram/meta account through their AI password reset chatbot" was going around and sold on shady forums for ~1 month before being patched.

▲throwaw12 2 hours ago | parent | prev [-]

then server side vulnerabilities should not be reported, instead sell the data, more profitable

▲petcat an hour ago | parent [-]

Very few people would even have the knowledge of who, how, or where to "sell" such vulnerabilities. Going through a public bounty program is pretty much always preferable.

Most people don't want to be felons.

▲pixl97 30 minutes ago | parent [-]

Don't worry, as more and more people get put of of work by AI the number of people willing to be felons will increase. Hell, they might even become president.