Serverside vulnerabilities have essentially no market outside of bug bounties. T... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tptacek 12 months ago \| parent \| context \| favorite \| on: Leaking the email of any YouTube user for $10k Serverside vulnerabilities have essentially no market outside of bug bounties. This is a hell of a payout for a web finding.

mosselman 12 months ago [–]

Unless you build a “get email for all of your viewers” service that streamers use to gather emails

tptacek 12 months ago | [–]

And then Google notices, kills the bug, and comes after you. Meanwhile, each of those streamers is criminally liable. Sounds like a great business!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact