Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@N00bPancakes They bought a ticket for themselves and then wrote a letter to cuatomer service about how there's a vulnerability, attaching the receipt as proof. Exactly the way PoCs are supposed to be done.
-
@N00bPancakes It was a public service. One would expect publicly owned service providers to be less hostile than private entities.
An enormous government project that leaves the tax office's database along with all backups exposed to SQL injection.
I know for a fact that the tax office database in at least one country only got a cold backup a few years ago, so it's more likely than you think.
Although around that time someone hacked the public transport company and bought a 12 month ticket for free as PoC and he got jail for it so the risk is quite high.
rant
wk245