Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

RCE is 3000$ for *.yahoo.com https://hackerone.com/reports/6674. I forgot, they want RCE on https://login.yahoo.com, and then maybe, but maybe, they will pay 15000$

Thank you



That one single instance, in those circumstances, was $3k. Which (a) is much, much more than $50, and (b) is not bad for a bug that dies the instant the vendor learns about it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: