[-] brie@programming.dev 0 points 9 hours ago

Good, because it's not of interest.

Even better for your career is being an actual researcher with a good grasp on heap grooming, MAC circumvention instead of spreading FUD over something that can easily be detected with burp.

[-] brie@programming.dev 1 points 1 day ago

It's so much easier to quit social media when you're on meth.

[-] brie@programming.dev 3 points 2 days ago

Is it more effective than feeding them via TikTok, Twitter, Instagram?

[-] brie@programming.dev 1 points 2 days ago

Let me guess, you signed an NDA, and won't tell anyone which brands had badly configured access control in their web apps?

Each red flag is okay, but all together is rather strange. It's kinda classic to say that pajeets write shitty code.

[-] brie@programming.dev 1 points 2 days ago

Notice a few red flags. 1) they were contacted before the system was rolled out. Before anyone else could look for bugs 2) it is reported by techcrunch and is trending tech news 3) the exploits are rudimentary 90s era mistakes that even LLMs don't make these days

So it's likely that they paid McDonald's India to pretend to have horrible practices. $240 is another tactic to appear good and trustworthy. That brings traffic to their blue team company site, effective advertising. Standard fakery that security faggots utilize to spread the FUD to create demand for their services.

brie

joined 4 days ago