HackerTrans
TopNewTrendsCommentsPastAskShowJobs

anon223345

no profile record

Submissions

I have gained admin access to numerous GCloud Organizations by accident

275 points·by anon223345·3 ปีที่แล้ว·121 comments

Should I use Jenkins to Test or Gradle?

1 points·by anon223345·3 ปีที่แล้ว·2 comments

Is there a better way than Jenkins and Gradle?

1 points·by anon223345·3 ปีที่แล้ว·1 comments

comments

anon223345
·3 ปีที่แล้ว·discuss
That’s what I did and shouldn’t have. I did very well in tech and ended up not going back and finishing.

Now that I didn’t finish my degree 12 years later it makes me so 2x the effort to move ahead now that I’m a manager

It’s a ridiculous feeling when your subordinates have masters and you don’t even have a bachelors. Just my $0.02, I ended up fine but work twice as hard, if I’d just stayed that extra 2 years

Now I have a family and am taking a year long leave of absence to finish my degree, after spending over 10 years doing it in my side time, I have a year left. It’s is unnecessarily nerve racking
anon223345
·3 ปีที่แล้ว·discuss
The data links can be hacked or jammed that’s why they use pilots
anon223345
·3 ปีที่แล้ว·discuss
I strive to become a Hashira
anon223345
·3 ปีที่แล้ว·discuss
The best example is my iPhone charging cords. It was $5, and didn’t work. It was so cheap that rather than the dog and pony show of doin g a return, I ordered another one from another vendor that also didn’t work

I then ordered official apple one that worked

And the HDMI splitter I bought sings to me

And the baby toys, it’s almost comically bad grammar on the box, and the kids songs are Chinese accents

My $100 battery charger, takes half a day to charge
anon223345
·3 ปีที่แล้ว·discuss
Mark McGwire
anon223345
·3 ปีที่แล้ว·discuss
I actually cancelled prime because Amazon products these days suck, it’s become literally flea market shit

I probably would use Amazon cell phone service, but would be good if I could just buy that, not all of prime
anon223345
·3 ปีที่แล้ว·discuss
Update #3 Got an honorable mention from Google Bug Hunters

They said they’re gonna see if it’s worth fixing and will get back to me. They didn’t award a bug bounty, but I’ll take the kudos.
anon223345
·3 ปีที่แล้ว·discuss
Mine a Bitcoin
anon223345
·3 ปีที่แล้ว·discuss
I’m sure the customers who were affected will get the bulk of that compensation.
anon223345
·3 ปีที่แล้ว·discuss
Hey! I sent you a friend request in LinkedIn, it didn’t let me message you directly without having LinkedIn premium

Can send you the whole 9 yards over there
anon223345
·3 ปีที่แล้ว·discuss
It seems they actually responded to the bug bounty request, I put the response up above
anon223345
·3 ปีที่แล้ว·discuss
Update #2 - they actually responded to my bug bounty request. Seems they think it may be worth fixing but not a big enough deal to pay out a bounty to me. Obviously I’d like the bounty but if I got any recognition that would be awesome

—- Hi,

Thanks again for your report.

I've filed a bug with the responsible product team based on your report. The product team will evaluate your report and decide if a fix is required. We'll let you know if the issue was fixed.

Regarding our Vulnerability Reward Program: At first glance, it seems this issue is not severe enough to qualify for a reward. However, the VRP panel will take a closer look at the issue at their next meeting. We'll update you once we've come to a decision.

If you don't hear back from us in 2-3 weeks or have additional information, let us know!

Regards, Google Security Team
anon223345
·3 ปีที่แล้ว·discuss
I filed a bug bounty! If this is working as expected then so be it…

I didn’t even know this hit front page till you said something

I’m just gonna leave the other orgs alone and not doing anything in there until I can figure out a strategy to delete this google group (which I am actually using to manage my own accounts) my accounts are just hobby accounts more than anything, it’s crazy I logged in and found these full-blown business accounts lol

Just insane to me that I don’t have to confirm on my end that I should be the admin, or billing role lol, they can just one way add you…

I think they meant to add their service account and instead added my google group, the URLs are kind of similar
anon223345
·3 ปีที่แล้ว·discuss
That’s awesome lol
anon223345
·3 ปีที่แล้ว·discuss
I’ll try that I suppose, it sounds like I’m going to have to delete that google group which is going to be a pain because I actually use it…

I did file a bug bounty hopefully that goes somewhere
anon223345
·3 ปีที่แล้ว·discuss
UPDATE: I have just submitted a bug bounty request

That would really help my career and life if I get that!

I won’t do anything with the accounts I accidentally have access to
anon223345
·3 ปีที่แล้ว·discuss
I’m just going to delete the group
anon223345
·3 ปีที่แล้ว·discuss
Thank you will try that…
anon223345
·3 ปีที่แล้ว·discuss
What it’s doing is actually useful, using a group to easily add people to roles is great

Not making the group do confirmation, or even acknowledging the addition is super stupid
anon223345
·3 ปีที่แล้ว·discuss
Good call, the problem is I use the group for my own projects…

I will painstakingly change that to not use groups and then delete the group if it lets me

It’s just kinda stupid people are allowed to just add my group with my group not even confirming