$36k Google App Engine RCE
sites.google.com
$36k Google App Engine RCE
1–10 of 164 posts
Re: $36k Google App Engine RCE
#2This report showcases a ton of tenacity and thoroughness. Not his first time as well: https://sites.google.com/site/testsitehacking/10k-host-heade.... Very impressive.
“Please stop exploring this further, as it seems you could easily break something” has got to be the best reply one can receive to a bug bounty report.
Re: $36k Google App Engine RCE
#3> I am 18-year-old student at the University of the Republic [Uruguay] interested in computer security
Someone could say that he could have gotten even more money by selling his findings in the black market, very difficult but doable. However, as someone who understands how studying computer science in a 3rd-world country is, getting USD +36k in a legal way and from a company that is considered one of the best in the industry, it must have felt very good to get that mail.
Congratulations, and keep the good work.
Re: $36k Google App Engine RCE
#4> I am 18-year-old student at the University of the Republic [Uruguay] interested in computer security Someone could say that he could have gotten even more money by selling his findings in the black market, very difficult but doable. However, as someone who understands how studying computer science in a 3rd-world country is, getting USD +36k in a legal way and from a company that is considered one of the best in the…
Plus I imagine putting that on your resume/CV will be a big help. An amazing talking point for interviews. Projects a strong sense of integrity. It would help them get a remote job or visa.
Re: $36k Google App Engine RCE
#5> I am 18-year-old student at the University of the Republic [Uruguay] interested in computer security Someone could say that he could have gotten even more money by selling his findings in the black market, very difficult but doable. However, as someone who understands how studying computer science in a 3rd-world country is, getting USD +36k in a legal way and from a company that is considered one of the best in the…
That's pretty advanced stuff for an 18y/o, even for most senior developers. No doubt Google will try to recruit him after he finishes university.
Re: $36k Google App Engine RCE
#6Mention of #savetheexpanse in article is nice dedication of sorts :)
Re: $36k Google App Engine RCE
#7I used to work support for GAE and recognize all of this. This is really impressive, congrats on the great work and huge bounty. Keep it up!
Re: $36k Google App Engine RCE
#8I sure as hell wasnt this competent at 18 let alone now. Kudos to him.
Re: $36k Google App Engine RCE
#9> I am 18-year-old student at the University of the Republic [Uruguay] interested in computer security Someone could say that he could have gotten even more money by selling his findings in the black market, very difficult but doable. However, as someone who understands how studying computer science in a 3rd-world country is, getting USD +36k in a legal way and from a company that is considered one of the best in the…
Uruguay is not third world country.
Re: $36k Google App Engine RCE
#10> I am 18-year-old student at the University of the Republic [Uruguay] interested in computer security Someone could say that he could have gotten even more money by selling his findings in the black market, very difficult but doable. However, as someone who understands how studying computer science in a 3rd-world country is, getting USD +36k in a legal way and from a company that is considered one of the best in the…
Uruguay is not third world country.
Yes it is. I do not want to be that stickler but this is the charts for that term:
1st world: US, UK, West Germany, essentially western countries
2nd world: Soviets, East Germany, communist countries
3rd world: everyone who doesn’t fit the Cold War theater.
Either way, a GDP per capita of $15k isn’t considered “first” at whatever category you want to assign it by. Unfortunately there are no “1st world” countries in Latin America.