[tedk-42]

Hmmm 12K seems like a bit much, even if it's fintech.

They also didn't mention the company.

The title feels clickbaity as it's not specific to AWS API gateway and instead, the implementation of it.

And who hosts on blogspot...

[treszkai]

Yes, it and the other three posts sound positively AI written. The first post on the blog is how OP uploaded a backdoored dataset to HuggingFace and left it there for 6 months – whether made up or not, it doesn't sound great.

[sillysaurusx]

Why not?

This is arguing for style over substance. The goal is to explain how a bug impacts the company. Anything that achieves the goal is de facto good. Remember, the alternative is for the company not to be notified at all.

[oasisbob]

Style, and the effort an author put into their writing are both legitimate targets of rhetoric, analysis, and criticism.

[sillysaurusx]

They got $12k for their work. Their writeup was fine.

[hdndjsbbs]

I clicked on the post and immediately bounced off because it was intense slop. Like a high schooler padding out their essay to hit a word count.

I don't care if they got paid for it. It's an interesting misconfiguration that you can describe in one sentence. I don't need to read the corresponding 500 word blog post.

[utf_8x]

Considering it let them do an unauthorized wire transfer from a system account, 12k seems pretty reasonable.

[Quarrelsome]

got any more criticisms, font choice, perhaps there's some duplication in their css?

I think 12k could be fine given how much it might have cost them if nobody had noticed.

[rithdmc]

Or if someone with malicious intent noticed.

[savolai]

It's not really fair to criticise hosting choice, but this lead me down a rabbit hole.

Noticed that non-responsive blog layouts are rare these days. Most are from blogspot. So I took a look and realized that blogger nowadays actually supports responsive layouts, but apparently... they are not popular?

https://blogger.googleblog.com/2017/03/share-your-unique-sty...

[Kwpolska]

Google barely maintains Blogger, and people have old blogs with old templates they never felt the need to change.

[varispeed]

Exactly. What do these researchers think? Getting rich finding security flaws? They should get $5 at best, buy themselves chocolate bar and an orange juice and be grateful for the opportunity bestowed upon them by the rich.

[paulryanrogers]

OJ here is over $5. Chocolate bars are not far behind. Of course I'm not complaining. Our kleptocrat overlords are doing great works!