this post was submitted on 20 Dec 2024
7 points (88.9% liked)
Hacker News
726 readers
451 users here now
Posts from the RSS Feed of HackerNews.
The feed sometimes contains ads and posts that have been removed by the mod team at HN.
founded 5 months ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
As a response to 3, I'm a professional pentester. I see several of the mistakes mentioned more than I'd like. Stuff like that still happens on the regular.
I typically get higher profile brands similar to McDonald's as well.
Let me guess, you signed an NDA, and won't tell anyone which brands had badly configured access control in their web apps?
Each red flag is okay, but all together is rather strange. It's kinda classic to say that pajeets write shitty code.
Of course I'm not telling you my fucking clients. My career path requires a modicum of professionalism
Good, because it's not of interest.
Even better for your career is being an actual researcher with a good grasp on heap grooming, MAC circumvention instead of spreading FUD over something that can easily be detected with burp.