What Happens When You Send a Zero-Day to a Bank?
privacylog.blogspot.com
What Happens When You Send a Zero-Day to a Bank?
1–10 of 454 posts
Re: What Happens When You Send a Zero-Day to a Bank?
#2That's a lot of errors for one document.
Re: What Happens When You Send a Zero-Day to a Bank?
#3At least it was over http/s
Terrible nonetheless. Reminds me of how Mt. Gox used to hand out password resets with plaintext passwords in the query string on their own forums.
Re: What Happens When You Send a Zero-Day to a Bank?
#4Were cookies shared across sites in 2008? It seems pretty odd..
Re: What Happens When You Send a Zero-Day to a Bank?
#5Wow. Going on with your life as a C-level executive with this knowledge, as if it's just all good, is just insane. I'm sure they're in the clear personally now, but I can certainly see why they would wanna sell their company fast after gaining this knowledge in 2010.
Re: What Happens When You Send a Zero-Day to a Bank?
#6Kudos for the balls to come public despite NDA.
Re: What Happens When You Send a Zero-Day to a Bank?
#7The NDA is not a valid contract because there is no consideration. For a contract to be valid each party has to gain something. This is why many contracts include a token consideration of $1. This one didn't, so it's invalid.
Re: What Happens When You Send a Zero-Day to a Bank?
#8At least it was over http/s Terrible nonetheless. Reminds me of how Mt. Gox used to hand out password resets with plaintext passwords in the query string on their own forums.
Reminds me of how Mt. Gox used to hand out password resets with plaintext passwords in the query string on their own forums.
Sounds like somebody should write a book about all of the missteps in that debacle.
Re: What Happens When You Send a Zero-Day to a Bank?
#9I would not be surprised if this turns into a class action lawsuit. The negligence here is remarkable.
Re: What Happens When You Send a Zero-Day to a Bank?
#10Would he not have a case of gross negligence against Zecco if he were a customer? Is there something preventing a lawsuit, outside of the possibly non-binding NDA?