Yahoo Remote Command Execution Vulnerability Discovered

Was actually surprised how Yahoo handled that and thanked the person for posting the vulnerability, was expecting another "landed in jail for etc etc" theme :D
 
wait you mean that isn't how you are supposed to make sites function?
 
dyzophoria said:
Was actually surprised how Yahoo handled that and thanked the person for posting the vulnerability, was expecting another "landed in jail for etc etc" theme :D
Click to expand...

Actually a lot of these companies now offer rewards if you can find stuff like this. They only get pissed when you screw up their servers / services, steal information and sell it, or even post online about the issue and never tell them about it in advance.
 
Yahoo offers rewards and they better pay him.. he did a service to them. Ethical hacking.
 
Well, he doesn't live in the United Corporation of America, so I doubt they could put him in jail. But from what I have seen in the past Yahoo is good about these types of things. It was nice of him to post it as opposed to sell it to the highest bidder.
 
You must log in or register to reply here.
Back
Top