Side note: this page gives me the weirdest Firefox behaviour I've ever seen: https://gfycat.com/HandyRapidJabiru
18yo arrested for reporting a bug in the new Budapest e-Ticket system
61–70 of 329 posts
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#62Side note: this page gives me the weirdest Firefox behaviour I've ever seen: https://gfycat.com/HandyRapidJabiru
I want to emulate that behavior somehow.
Code:
var db = document.body;document.onscroll = function(){db.style.transform = 'scaleY(1)'; db.style.transform = 'scaleY('+db.scrollHeight / (db.scrollHeight - db.scrollTop)+')'}Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#63I remember coming across a serious bug in a site that belonged to a top multi-billion company. My brother also found what essentially an unrestricted privacy leak (and possibly editing access) in a top university (leaked data is sensitive personal information, not academic). Neither of us reported (or exploited) what we found. Protection from this kind of blame-shifting and misdirected retaliation should be guarantee…
I was more naive, but it worked out. Reported a vulnerability and how to fix it to a regional bank when applying for a student loan. They asked me to come in person to explain it and dropped a point off my interest rate. In hindsight it was a huge risk and I was dangerously trusting.
What they don't like is the publicity.
Edit: but maybe not in Hungary. It's the bad child in EU.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#64They had a form you could try the demo where it sent an SMS to verify and only allowed one query.
If you looked at the source of the page it had hidden fields to override the SMS verification and allow multiple queries.
I freaked out some friends for the day and nearly contacted a journalist but lost interest after some weeks.
I could have had my 15 minutes of fame or be on some list, or both.
It's alright, had some fun.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#65Earlier quoted context omitted.
Please don't spread fake news! The metro system is owned by the city, and ultimately the government. With all its problems, it is still not a mafia. Although you are in a different part of the world, but when visiting the poor and backwards Eastern Europe, please use your common sense, or at least do some fact check.
TBH in Eastern Europe something being owned by government usually means that it's being ran (basically owned) by mafia.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#66Earlier quoted context omitted.
TBH in Eastern Europe something being owned by government usually means that it's being ran (basically owned) by mafia.
This is simple demagogue populism. This is not a critique of the problems, and does not start any fruitful discussion, and will not lead eventually to better conditions.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#67Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#68Actually he exploited the bug and purchased a ticket for the fraction of the price and than reported it to the public transportation company. The company that runs the infrastructure (not the public transportation one) followed its internal policy and Hungarian law reported the incident to authorities. Police brought in the guy for questioning.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#69Actually he exploited the bug and purchased a ticket for the fraction of the price and than reported it to the public transportation company. The company that runs the infrastructure (not the public transportation one) followed its internal policy and Hungarian law reported the incident to authorities. Police brought in the guy for questioning.
They took him as a criminal, got his fingerprints, took a photo of him. I do not think they proceeded this in the right way. They should have fixed the bugs, protect our personal data and say sorry for this.
Moreover, it is not only Hungarian but also European law to report incidents involving personally identifiable information leaks and there are authorities that investigate and fine companies failing to comply with the law. Any person (including you) can report such companies to authorities.
Re: 18yo arrested for reporting a bug in the new Budapest e-Ticket system
#70Earlier quoted context omitted.
That's probably the weirdest browser behaviour I've seen on any browser! I don't even know how I would describe that to someone :/
Like it's printed on some form of mathematical hyper-rubber sheet, and scrolling pulls it down until it stretches into invisibility, rendering the next rubber page visible.