Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What Happens When You Send a Zero-Day to a Bank?

privacylog.blogspot.com

Post reply on HN
Print view View original

61–70 of 454 posts

Re: What Happens When You Send a Zero-Day to a Bank?

#61

Post by r00fus »

azhenley wrote: post #45
lisper wrote: post #7

The NDA is not a valid contract because there is no consideration. For a contract to be valid each party has to gain something. This is why many contracts include a token consideration of $1. This one didn't, so it's invalid.

What about NDAs for interviews? What am I gaining (a chance at getting a job doesn't seem like a gain)?

The government taxes you for stock options (which are opportunities to gain profits).

A chance for employment (over an outright dismissal) is a recognizable gain.

You are however, free to decline with the appropriate consequences.

Re: What Happens When You Send a Zero-Day to a Bank?

#63

Post by sjtgraham »

scrollaway wrote: post #52
diogenescynic wrote: post #32

Earlier quoted context omitted.

Tell us what bank so we can avoid them.

I don't think it's HSBC, but they do similarly horrific stuff. Almost all banks have a truly terrible online service. I'm a happy user of N26. I very, very highly recommend it to all european customers. I'm never dealing with shitty bank service again. https://n26.com/ (Email me if you want a referral invite).

N26 had some of the worst security until a researcher came along. See https://media.ccc.de/v/33c3-7969-shut_up_and_take_my_money

Re: What Happens When You Send a Zero-Day to a Bank?

#64

Post by [deleted] »

scrollaway wrote: post #52
diogenescynic wrote: post #32

Earlier quoted context omitted.

Tell us what bank so we can avoid them.

I don't think it's HSBC, but they do similarly horrific stuff. Almost all banks have a truly terrible online service. I'm a happy user of N26. I very, very highly recommend it to all european customers. I'm never dealing with shitty bank service again. https://n26.com/ (Email me if you want a referral invite).

[deleted]

Re: What Happens When You Send a Zero-Day to a Bank?

#69

Post by goda90 »

jbpetersen wrote: post #53
nothrabannosir wrote: post #47

Earlier quoted context omitted.

This deserves more than an upvote. This is exactly the right attitude. It puts the incentives in the right place and will let the market do what she does best: work.

Better yet: Short their stock, then write a scary blog post about the problem.

I feel like someone would try to sue over such an action, but would they have any ground to stand on?

Re: What Happens When You Send a Zero-Day to a Bank?

#70

Post by teamhappy »

In Germany you can contact the CCC to walk you through the process of reporting vulns like this one. I'm sure the EFF does similar things for US citizens. A quick Google search brought up this FAQ: Coders' Rights Project Vulnerability Reporting FAQ (https://www.eff.org/issues/coders/vulnerability-reporting-fa...)
Post reply on HN