alt Hacker NewsThis is a pet peeve of tptacek:
> server-side vulnerabilities are worth very little, because they quickly get patched.
Replies
throwaw12 • yesterday at 2:02 PM
then server side vulnerabilities should not be reported, instead sell the data, more profitable
➕ show 1 reply
hashstring • today at 1:51 AM
Technically this is what you’d call a client-side vuln, but yes, server-side as in cloud.
The "take over any instagram/meta account through their AI password reset chatbot" was going around and sold on shady forums for ~1 month before being patched.