Technology
HackerOne pays $20K to user who hacked its own platform
New Delhi, Dec 9
Facing an embarrassing situation, San Francisco-based HackerOne which is a vulnerability coordination and bug bounty platform and boasts of clients like Starbucks, Instagram, Goldman Sachs, Twitter and Zomato, has paid $20,000 to a user who exposed a vulnerability in its own bug bounty platform.
The vulnerability was exposed by a user with the handle called "haxta4ok00" who has now been paid $20,000 by HackerOne.
"A hacker had access for a short time to information relating to other programmes running on the HackerOne platform.
"Less than 5 per cent of HackerOne programmes were impacted, and those programmes were contacted within 24 hours of report receipt," HackerOne said in a statement this week.
The hacker, and HackerOne community member posted a report to the bug bounty platform: "I can read all reports @security and more programmes."
HackerOne responded: "We didn't find it necessary for you to have opened all the reports and pages in order to validate you had access to the account. Would you mind explaining why you did so to us?"
Haxta4ok00 said: "I did it to show the impact. I didn't mean any harm by it. I reported it to you at once. I was not sure that after the token substitution I would own all the rights. I apologise if I did anything wrong. But it was just a white hack."
In August this year, HackerOne revealed that hackers earned $21 million in just a year reporting vulnerabilities via various bug bounty opportunities as governments' efforts to fix malware increased a whopping 214 per cent globally.
Food delivery platform Zomato has paid more than $100,000 (over Rs 70 lakh) to 435 hackers to date for finding and fixing bugs on its platform.
With the help of HackerOne's bug bounty programme since July 2017, Zomato has successfully resolved 775 vulnerabilities report.
Hacker-powered security is a technique that utilises collaboration with the hacker community to find unknown security vulnerabilities and reduce security risk. Popular examples include bug bounty programmes and vulnerability disclosure policies.
The vulnerability was exposed by a user with the handle called "haxta4ok00" who has now been paid $20,000 by HackerOne.
"A hacker had access for a short time to information relating to other programmes running on the HackerOne platform.
"Less than 5 per cent of HackerOne programmes were impacted, and those programmes were contacted within 24 hours of report receipt," HackerOne said in a statement this week.
The hacker, and HackerOne community member posted a report to the bug bounty platform: "I can read all reports @security and more programmes."
HackerOne responded: "We didn't find it necessary for you to have opened all the reports and pages in order to validate you had access to the account. Would you mind explaining why you did so to us?"
Haxta4ok00 said: "I did it to show the impact. I didn't mean any harm by it. I reported it to you at once. I was not sure that after the token substitution I would own all the rights. I apologise if I did anything wrong. But it was just a white hack."
In August this year, HackerOne revealed that hackers earned $21 million in just a year reporting vulnerabilities via various bug bounty opportunities as governments' efforts to fix malware increased a whopping 214 per cent globally.
Food delivery platform Zomato has paid more than $100,000 (over Rs 70 lakh) to 435 hackers to date for finding and fixing bugs on its platform.
With the help of HackerOne's bug bounty programme since July 2017, Zomato has successfully resolved 775 vulnerabilities report.
Hacker-powered security is a technique that utilises collaboration with the hacker community to find unknown security vulnerabilities and reduce security risk. Popular examples include bug bounty programmes and vulnerability disclosure policies.
9 minutes ago
America-India is the AI power of the new world: PM Modi
12 minutes ago
Have always understood capabilites of Indian diaspora...I call you Rashtradoot: PM Modi in New York
13 minutes ago
India's 'Namaste' has become multinational, "local se global ho gaya": PM Modi tells diaspora in New York
31 minutes ago
PM Modi given thunderous welcome at Nassau Coliseum, to address Indian diaspora in US shortly
3 hours ago
Security heightened for PM Modi’s New York rally
3 hours ago
NRIs recall PM Modi's early US visits: Visionary leadership and tech enthusiasm
5 hours ago
Thousands travel from across US to attend PM Modi's diaspora event in Uniondale
7 hours ago
PM Modi arrives in New York to attend UN Summit of the Future
7 hours ago
PM Modi holds bilateral talks with Biden, discusses global, regional issues: MEA
7 hours ago
PM Modi gifts antique silver hand-engraved train model to Biden
7 hours ago
US returns 297 invaluable antiquities to India, PM Modi expresses gratitude
7 hours ago
Quad commits to strengthening cooperation in Indian Ocean region
7 hours ago
US: Four shot dead, dozens injured in mass shooting