How to hack Discord, Vercel and more with one easy trick
1–10 of 39 posts
Re: How to hack Discord, Vercel and more with one easy trick
#2Re: How to hack Discord, Vercel and more with one easy trick
#3[deleted]
Re: How to hack Discord, Vercel and more with one easy trick
#4This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of users and the person who reports the vulnerability gets...$5k.
If I recall last week Mintlify wrote a blog post showcasing their impressive(ly complicated) caching architecture. Pretending like they were doing real engineering, when it turns out nobody there seems to know what they're doing, but they've managed to convince some big names to use them.
Man, it's like everything I hate about modern tech. Good job Eva for finding this one. Starting to think that every AI startup or company that is heavily using gen-ai for coding is probably extremely vulnerable to the simplest of attacks. Might be a way to make some extra spending money lol.
Re: How to hack Discord, Vercel and more with one easy trick
#5This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of users and the person who reports the vulnerability gets...$5k. If I recall last week Mintlify wrote a blog post showcasing their impressive(ly complicated) caching architecture. Pretending…
You bet not all THW vulnerabilities are reported to the vendors. Not with 5k bounty for THAT.
Re: How to hack Discord, Vercel and more with one easy trick
#6This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of users and the person who reports the vulnerability gets...$5k. If I recall last week Mintlify wrote a blog post showcasing their impressive(ly complicated) caching architecture. Pretending…
You bet not all THW vulnerabilities are reported to the vendors. Not with 5k bounty for THAT.
Yeah it made me re-evaluate how much I can trust those platforms
Re: How to hack Discord, Vercel and more with one easy trick
#7$5k is such a small payout for this sort of finding.
Re: How to hack Discord, Vercel and more with one easy trick
#8This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of users and the person who reports the vulnerability gets...$5k. If I recall last week Mintlify wrote a blog post showcasing their impressive(ly complicated) caching architecture. Pretending…
>
This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow ...
Is there any indication Mintify was "vibe coded"?
Re: How to hack Discord, Vercel and more with one easy trick
#9This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of users and the person who reports the vulnerability gets...$5k. If I recall last week Mintlify wrote a blog post showcasing their impressive(ly complicated) caching architecture. Pretending…
> This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow ... Is there any indication Mintify was "vibe coded"?
I'm giving them the benefit of the doubt, as the alternative would be that their developers are completely incompetent. The vulnerability is the equivalent to letting a user save HTML to a database and then injecting it into every page completely unsanitized.
Re: How to hack Discord, Vercel and more with one easy trick
#10This feels so emblematic of our current era. VC funded vibe coded AI documentation startup somehow gets big name customers who don't properly vet the security of the platform, ship a massive vulnerability that could pwn millions of users and the person who reports the vulnerability gets...$5k. If I recall last week Mintlify wrote a blog post showcasing their impressive(ly complicated) caching architecture. Pretending…
You bet not all THW vulnerabilities are reported to the vendors. Not with 5k bounty for THAT.
Yeah thats the scary thing. I know it's a bit of a meme about how as programmers we don't trust other programmers or software, but it's becoming more and more true and necessary. I want to use as little software as possible these days.