Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it. And who hosts on blogspot...
got any more criticisms, font choice, perhaps there's some duplication in their css? I think 12k could be fine given how much it might have cost them if nobody had noticed.
I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
31–40 of 45 posts
Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
#32[flagged]
Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
#33Earlier quoted context omitted.
Yes, it and the other three posts sound positively AI written. The first post on the blog is how OP uploaded a backdoored dataset to HuggingFace and left it there for 6 months – whether made up or not, it doesn't sound great.
Why not? This is arguing for style over substance. The goal is to explain how a bug impacts the company. Anything that achieves the goal is de facto good. Remember, the alternative is for the company not to be notified at all.
Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
#34[flagged]
Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
#35Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
#36Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
#37Earlier quoted context omitted.
Why not? This is arguing for style over substance. The goal is to explain how a bug impacts the company. Anything that achieves the goal is de facto good. Remember, the alternative is for the company not to be notified at all.
Style, and the effort an author put into their writing are both legitimate targets of rhetoric, analysis, and criticism.
Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty
#38You didn’t break API Gateway or bypass it, you broke the company using incorrect api gateway config. Your title is clickbait