Re: Open Bug Bounty

2020-05-27 Thread Russell Coker via luv-main
On Thursday, 28 May 2020 9:13:27 AM AEST James McGlashan via luv-main wrote: > (Redacted retransmit. Unsure if Russell received unredacted version after no > response and the issue remaining unpatched. Added a note about TeamHash' > low prices and implied low time.) Yes I got it thanks. I'm

Re: Open Bug Bounty

2020-05-27 Thread James McGlashan via luv-main
(On-list resend; accidentally replied directly to Sam.) On Thu, May 28, 2020 at 10:15:32AM +1000, Sam Varghese via luv-main wrote: > Where do you get this figure from? It sounds wildly optimistic, even > after > passage of the Code on Wages Act, 2019 in August last year. Ah, I misread a

Re: Open Bug Bounty

2020-05-27 Thread Sam Varghese via luv-main
On Thu, May 28, 2020 9:13 am, James McGlashan via luv-main wrote: > Indian minimum wage for a single person is approximately ₹550 (9-10 AUD) > per > hour. Where do you get this figure from? It sounds wildly optimistic, even after passage of the Code on Wages Act, 2019 in August last year. Sam

Re: Open Bug Bounty

2020-05-27 Thread James McGlashan via luv-main
rts/1170432/ > Is this some kind of scam? Open Bug Bounty is a service to link security researchers - "TeamHash" in India - with site operators - you. The report you've linked contains a section "For Website Operators and Owners": - "Please contact the researcher di

Re: Open Bug Bounty

2020-05-25 Thread Anthony via luv-main
That said, I just revisited and found that indeed, they did find a bug that allowed them to inject arbitrary javascript via poor input validation on the part of the web designer :-/ On Tue, 26 May 2020 at 15:15, Anthony wrote: > I got one of those for a company I look after awhile ago. > > The

Re: Open Bug Bounty

2020-05-25 Thread Anthony via luv-main
I got one of those for a company I look after awhile ago. The one I got appeared to be from a recent IT school graduate armed with Google + whois client. On Sun, 24 May 2020 at 15:01, Russell Coker via luv-main < luv-main@luv.asn.au> wrote: > https://www.openbugbounty.org/reports/1170432/ > >

Open Bug Bounty

2020-05-23 Thread Russell Coker via luv-main
https://www.openbugbounty.org/reports/1170432/ Is this some kind of scam? The web page in question is a static page with an embedded Google search field. Unless there's a problem with the Google search (which would probably be more of a problem for Google than for me) then I can't imagine