Live data from Hacker News

Mozilla pays 12-year-old San Jose boy for hunting bugs in system

mercurynews.com

21–30 of 60 posts

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#21
post #2

He's 12 years old. He found a stack overflow. In document.write. In Firefox. In 2010. Clearly something has gone wrong with spacetime.

One can only hope that the next generation will find a way to blow whistles into cell phones to get free calls.

Awesome Phreaker reference...nice

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#22
post #4
post #2

He's 12 years old. He found a stack overflow. In document.write. In Firefox. In 2010. Clearly something has gone wrong with spacetime.

This should go in your next hiring post. "Who we're looking for: Somebody with the chops to dig into code that has passed professional inspection and do horrible, horrible things to it. Someone who can find a stack overflow in document.write. Someone like you , because if you can program we will teach you these and other dark arts. The last stack overflow in Firefox was found by a 12 year old. Are you going to let yo…

Everyone has a story about a friend who sold a vuln for X. At least one case though has been documented in an academic paper by a well respected researcher [1]. (That would put the cheque at [1] http://weis2007.econinfosec.org/papers/29.pdf

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#23
post #2

He's 12 years old. He found a stack overflow. In document.write. In Firefox. In 2010. Clearly something has gone wrong with spacetime.

One can only hope that the next generation will find a way to blow whistles into cell phones to get free calls.

For those who don't know: early phone hackers (phreaks/phreakers) discovered that a 2600hz tone would indicate a trunk was idle, reset and listen for a new call. Since the line was not actually hung up the billing system wouldn't activate leading to free phone calls.

Some people learned to whistle the tone, while others used bird calls, and even a whistle given free by Captain Crunch (the cereal).

http://en.wikipedia.org/wiki/2600_hertz

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#24
post #14

Looks like a fairly default Ubuntu install in the picture. I remember playing with Linux at that age.. fun times. He probably had a better time of it than me struggling with Redhat 6.3 from my local bookstore though...

local bookstore? I had to find a news agent that sold it far from where I lived, the download size would've taken weeks to finish.

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#25
post #2

He's 12 years old. He found a stack overflow. In document.write. In Firefox. In 2010. Clearly something has gone wrong with spacetime.

Don't think the number of clever kids changed much over the year. It's just much harder to spot them, because everyone and their dog is "doing computers" now.

I don't think the time-warp is so much the clever kid, as the fact that this is a 1970s vulnerability: an exploitable buffer overflow in a print statement. You'd think we would have solved that problem by now!

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#26
Here are two pieces of evidence that this boy was fortunate in his choice of parents:

Miller is quick to point out that he's not just playing games; what Alex is doing is learning. "Clearly it's his passion," she says.

"But you still have to do chores," Miller reminds him when he talks of his next debugging mission.

What a delightful story, and so free of the "genius whiz kid" trope that has infected this genre since long before I was that age.

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#28
post #27

Why oh why couldn't I have been brought up in a white, suburban, upper-middle class family with my own computer and a highspeed internet connection. Stories like this always make me bitter, but good on the kid for making the most of his upbringing.

WTH?

MOD consisted mainly of poor Brooklyn kids; in fact, some of them were members of street gangs, and taught themselves to hack on school computers. From nowhere to the cover of magazines ..

The wikipedia article sucks, but the lore is out there and well known:

http://en.wikipedia.org/wiki/Masters_of_Deception

Re: Mozilla pays 12-year-old San Jose boy for hunting bugs in system

#30
post #22
post #4

Earlier quoted context omitted.

This should go in your next hiring post. "Who we're looking for: Somebody with the chops to dig into code that has passed professional inspection and do horrible, horrible things to it. Someone who can find a stack overflow in document.write. Someone like you , because if you can program we will teach you these and other dark arts. The last stack overflow in Firefox was found by a 12 year old. Are you going to let yo…

Everyone has a story about a friend who sold a vuln for X. At least one case though has been documented in an academic paper by a well respected researcher [1]. (That would put the cheque at [1] http://weis2007.econinfosec.org/papers/29.pdf

This is pretty old, in vulnerability-markets terms. The practice has become more mainstream since then.
Post reply on HN