Stealing checks worth millions and pwning a bank
1–10 of 35 posts
Re: Stealing checks worth millions and pwning a bank
#2"The web app was so sensitive in nature I can’t really even describe the contents, but it was a big find by itself."
Maybe that's true, and certainly the vulnerabilities described in more detail are already quite a big deal, but the author probably should have omitted the above quote from their post as it leaves the reader with some suspicion that perhaps this is a bit of a "Fish Story" (fisherman exaggerating the size of the fish they caught) https://www.urbandictionary.com/define.php?term=Fish%20Story
Re: Stealing checks worth millions and pwning a bank
#3"The web app was so sensitive in nature I can’t really even describe the contents, but it was a big find by itself." Maybe that's true, and certainly the vulnerabilities described in more detail are already quite a big deal, but the author probably should have omitted the above quote from their post as it leaves the reader with some suspicion that perhaps this is a bit of a "Fish Story" (fisherman exaggerating the si…
My first thought was that it was just an admin dashboard that was poorly attempted to be hidden by obscurity. It probably was thrown together during migration to work from home.
Re: Stealing checks worth millions and pwning a bank
#4"The web app was so sensitive in nature I can’t really even describe the contents, but it was a big find by itself." Maybe that's true, and certainly the vulnerabilities described in more detail are already quite a big deal, but the author probably should have omitted the above quote from their post as it leaves the reader with some suspicion that perhaps this is a bit of a "Fish Story" (fisherman exaggerating the si…
Its self-promotion. Basically an ad for themselves. IMHO as annoying as an ad, except HN allows me to downvote it.
Re: Stealing checks worth millions and pwning a bank
#5It's 2022, can we please stop saying 'pwned'?
Sure, I'll take the karma hit for this comment.
Re: Stealing checks worth millions and pwning a bank
#6It's 2022, can we please stop saying 'pwned'? Sure, I'll take the karma hit for this comment.
[deleted]
Re: Stealing checks worth millions and pwning a bank
#7It's 2022, can we please stop saying 'pwned'? Sure, I'll take the karma hit for this comment.
[deleted]
Re: Stealing checks worth millions and pwning a bank
#8It's 2022, can we please stop saying 'pwned'? Sure, I'll take the karma hit for this comment.
Have my upvote. I concur. The article doesn't really "pwn" in the true sense of the word anyway but that's secondary.
Re: Stealing checks worth millions and pwning a bank
#9It's 2022, can we please stop saying 'pwned'? Sure, I'll take the karma hit for this comment.
You could always make/install a browser extension that replaces the word with one you like if you find it offensive.
Re: Stealing checks worth millions and pwning a bank
#10The story ends inconclusively. I was expecting to know what the bank's reaction was or if they ever addressed these issues.