Live data from Hacker News

I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

theguptalog.blogspot.com

41–45 of 45 posts

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#41

Earlier quoted context omitted.

Yes, it and the other three posts sound positively AI written. The first post on the blog is how OP uploaded a backdoored dataset to HuggingFace and left it there for 6 months – whether made up or not, it doesn't sound great.

Why not? This is arguing for style over substance. The goal is to explain how a bug impacts the company. Anything that achieves the goal is de facto good. Remember, the alternative is for the company not to be notified at all.

I clicked on the post and immediately bounced off because it was intense slop. Like a high schooler padding out their essay to hit a word count.

I don't care if they got paid for it. It's an interesting misconfiguration that you can describe in one sentence. I don't need to read the corresponding 500 word blog post.

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#42
post #5

Hmmm 12K seems like a bit much, even if it's fintech. They also didn't mention the company. The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it. And who hosts on blogspot...

Exactly. What do these researchers think? Getting rich finding security flaws? They should get $5 at best, buy themselves chocolate bar and an orange juice and be grateful for the opportunity bestowed upon them by the rich.

OJ here is over $5. Chocolate bars are not far behind. Of course I'm not complaining. Our kleptocrat overlords are doing great works!

Re: I bypassed AWS API Gateway auth with a trailing slash. Got $12K bounty

#43

Earlier quoted context omitted.

But do you know where they all are

No. But my AI agent will happily burn electrons finding some... Maybe...

Hopefully it doesn’t hallucinate on you.
Post reply on HN