Live data from Hacker News

I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

theguptalog.blogspot.com

31–40 of 45 posts

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#31
post #5

Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it. And who hosts on blogspot...

got any more criticisms, font choice, perhaps there's some duplication in their css? I think 12k could be fine given how much it might have cost them if nobody had noticed.

Or if someone with malicious intent noticed.

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#33

Earlier quoted context omitted.

Yes, it and the other three posts sound positively AI written. The first post on the blog is how OP uploaded a backdoored dataset to HuggingFace and left it there for 6 months – whether made up or not, it doesn't sound great.

Why not? This is arguing for style over substance. The goal is to explain how a bug impacts the company. Anything that achieves the goal is de facto good. Remember, the alternative is for the company not to be notified at all.

Style, and the effort an author put into their writing are both legitimate targets of rhetoric, analysis, and criticism.

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#37

Earlier quoted context omitted.

Why not? This is arguing for style over substance. The goal is to explain how a bug impacts the company. Anything that achieves the goal is de facto good. Remember, the alternative is for the company not to be notified at all.

Style, and the effort an author put into their writing are both legitimate targets of rhetoric, analysis, and criticism.

They got $12k for their work. Their writeup was fine.

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#40
post #4

[flagged]

I have no idea why you think it's written by AI, unless you think that correct use of quote and dash characters means it must be AI.

There are plenty of tells. Quotes and dashes don't even have to enter into it.
Post reply on HN