• About TC
  • Affiliate Disclaimer
  • Privacy Policy
  • TOS
  • Contact
Friday, July 4, 2025
Techcratic
  • TC
  • AI
    Artificial Intelligence

    Transforming network operations with AI: How Swisscom built a network assistant using Amazon Bedrock

    Artificial Intelligence

    EgoDex: Learning Dexterous Manipulation from Large-Scale Egocentric Video

    Artificial Intelligence

    Instruction-Following Pruning for Large Language Models

    Artificial Intelligence

    How to Combine Streamlit, Pandas, and Plotly for Interactive Data Apps

    Artificial Intelligence

    Tailor responsible AI with new safeguard tiers in Amazon Bedrock Guardrails

    Artificial Intelligence

    Automate Data Quality Reports with n8n: From CSV to Professional Analysis

    Artificial Intelligence

    NewDay builds A Generative AI based Customer service Agent Assist with over 90% accuracy

    Artificial Intelligence

    5 Things You Need to Know About Agentic AI

    Artificial Intelligence

    Normalizing Flows are Capable Generative Models

  • App Zone
    Top 3 Launcher Apps for Apple: Features, Pros, and Cons

    Top 3 Launcher Apps for Apple: Features, Pros, and Cons

    Top 3 Launcher Apps for Android: Features, Pros, and Cons

    Top 3 Launcher Apps for Android: Features, Pros, and Cons

    Top 3 Card Game Apps of 2025: Features, Pros, and Cons

    Top 3 Card Game Apps of 2025: Features, Pros, and Cons

    Top 3 Medical Apps of 2025: Features, Pros, and Cons

    Top 3 Medical Apps of 2025: Features, Pros, and Cons

    Top 3 Travel Apps of 2025: Features, Pros, and Cons

    Top 3 Travel Apps of 2025: Features, Pros, and Cons

    Top 3 Casual Game Apps for 2025: Features, Pros, and Cons

    Top 3 Casual Game Apps for 2025: Features, Pros, and Cons

    Top 3 Food Apps for 2025: Features, Pros, and Cons

    Top 3 Food Apps for 2025: Features, Pros, and Cons

    Top 3 Sport Apps for 2025: Features, Pros, and Cons

    Top 3 Sport Apps for 2025: Features, Pros, and Cons

    Top 3 Productivity Apps for 2025: Features, Pros, and Cons

    Top 3 Productivity Apps for 2025: Features, Pros, and Cons

  • Apple
    Foldable iPads, Apple Intelligence blowback, new Apple Music Radio stations

    MacBook with iPhone CPU rumors, AI Siri partnerships, new EU App Store rules

    July 3, 2025 – iOS 26 features we use everyday

    DOJ lack of TikTok ban enforcement reasoning revealed in letters

    DOJ lack of TikTok ban enforcement reasoning revealed in letters

    New Mac models through 2026 revealed in leaked Apple identifiers

    New Mac models through 2026 revealed in leaked Apple identifiers

    Apple Music iOS 26 vs iOS 18: features compared

    Apple Music iOS 26 vs iOS 18: features compared

    New wallpapers from Apple now available for iPhone, iPad, Mac

    New wallpapers from Apple now available for iPhone, iPad, Mac

    Five new Apple products are coming soon in early 2025, here’s what to expect

    Apple to release Q3 2025 earnings results on Thursday, July 31

    Apple to reveal tariff-stricken Q3 results on July 31

    Apple to reveal tariff-stricken Q3 results on July 31

    Apple is right to ditch iPad Fold in favor of the iPhone Fold

    Apple is right to ditch iPad Fold in favor of the iPhone Fold

  • Retro Rewind
    Retro Rewind: Electronic Games April 1995

    Retro Rewind: Electronic Games April 1995

    Retro Rewind: Electronic Gaming Monthly Magazine Number 55 February 1994

    Retro Rewind: Electronic Gaming Monthly Magazine Number 57 April 1994

    Retro Rewind: Blast from the Past – 35 Iconic Commercials of 1988!

    Retro Rewind: Blast from the Past – 35 Iconic Commercials of 1988!

    Retro Rewind: PC World Magazine August 1998

    Retro Rewind: PC World Magazine August 1998

    Retro Rewind: Computer Shopper Magazine September 1997

    Retro Rewind: Computer Shopper Magazine September 1997

    Retro Rewind: PC Magazine December 2015

    Retro Rewind: PC Magazine December 2015

    Retro Rewind: EDGE Magazine RETRO #1: The Guide to Classic Videogame Playing and Collecting

    Retro Rewind: EDGE Magazine RETRO #1: The Guide to Classic Videogame Playing and Collecting

    Retro Rewind: Computer Gaming World Magazine Issue 73 December 1998

    Retro Rewind: Computer Gaming World Magazine Issue 73 December 1998

    Retro Rewind: Electronic Gaming Monthly Magazine Number 55 February 1994

    Retro Rewind: Electronic Gaming Monthly Magazine Number 55 February 1994

  • Tech Deals
    CableCreation Short USB C Cable 1FT Bundle with Micro USB to USB C Cable 0.65FT

    CableCreation Short USB C Cable 1FT Bundle with Micro USB to USB C Cable 0.65FT

    Apple iPad (5thGEneration) Wi-Fi, 128GB – Space Gray (Renewed)

    Apple iPad (5thGEneration) Wi-Fi, 128GB – Space Gray (Renewed)

    Soundcore Anker Motion Boom Plus IP67 Outdoor Speaker with 80W Stereo Sound, Black

    Soundcore Anker Motion Boom Plus IP67 Outdoor Speaker with 80W Stereo Sound, Black

    ADATA 2TB Premium SSD for PS5 PCIe Gen4 M.2 2280 Internal Gaming SSD Up to 7400 MB/s…

    ADATA 2TB Premium SSD for PS5 PCIe Gen4 M.2 2280 Internal Gaming SSD Up to 7400 MB/s…

    MageGee Portable 60% Mechanical Gaming Keyboard, MK-Box LED Backlit Compact 68 Keys Mini…

    MageGee Portable 60% Mechanical Gaming Keyboard, MK-Box LED Backlit Compact 68 Keys Mini…

    Skytech King 95 Gaming PC Desktop, Ryzen 7 9800X3D 4.7 GHz (5.2 GHz Turbo Boost), NVIDIA…

    Skytech King 95 Gaming PC Desktop, Ryzen 7 9800X3D 4.7 GHz (5.2 GHz Turbo Boost), NVIDIA…

    Logitech G502 HERO High Performance Wired Gaming Mouse, HERO 25K Sensor, 25,600 DPI,…

    Logitech G502 HERO High Performance Wired Gaming Mouse, HERO 25K Sensor, 25,600 DPI,…

    Minecraft – PlayStation 3 (Renewed)

    Minecraft – PlayStation 3 (Renewed)

    Carcassonne Board Game (BASE GAME) – Classic Tile-Laying Strategy for All Ages, Medieval…

    Carcassonne Board Game (BASE GAME) – Classic Tile-Laying Strategy for All Ages, Medieval…

  • Tech Eats
    Cheesy Broccoli Rice Mug: 5-Minute Super Comfort Food

    Cheesy Broccoli Rice Mug: 5-Minute Super Comfort Food

    Top 10 Vegetarian Recipes for 2025: Easy and Nutritious Meals for Busy People

    Top 10 Vegetarian Recipes for 2025: Easy and Nutritious Meals for Busy People

    Bacon Mug Lasagna: 5-Minute Microwave Meat Lover’s Dream

    Bacon Mug Lasagna: 5-Minute Microwave Meat Lover’s Dream

    Bacon Fried Rice Mug: 5-Minute Microwave Meal

    Bacon Fried Rice Mug: 5-Minute Microwave Meal

    Bacon & Cheddar Mug Biscuit: 2-Minute Savory Comfort

    Bacon & Cheddar Mug Biscuit: 2-Minute Savory Comfort

    Loaded Bacon Cheesy Potato Mug: 5-Minute Comfort Food

    Loaded Bacon Cheesy Potato Mug: 5-Minute Comfort Food

    Peanut Butter Banana Mug Muffin: 5-Minute Protein Snack

    Peanut Butter Banana Mug Muffin: 5-Minute Protein Snack

    Oreo Mug Cake: 2-Minute Cookie & Cake Combo!

    Oreo Mug Cake: 2-Minute Cookie & Cake Combo!

    Tiramisu Mug Cake: Coffee Lover’s Dream in 2 Minutes!

    Tiramisu Mug Cake: Coffee Lover’s Dream in 2 Minutes!

  • Tesla
    for Garmin GPS Car Mount 2 Pack Replacement Adhesive 17mm Ball Mount Dashboard…

    for Garmin GPS Car Mount 2 Pack Replacement Adhesive 17mm Ball Mount Dashboard…

    2PCS Soft Microfiber Car Dash Duster Brush, Mini Multi-Functional Car Cleaning Brush for…

    2PCS Soft Microfiber Car Dash Duster Brush, Mini Multi-Functional Car Cleaning Brush for…

    Tesla employees try to oust Elon, new Volvo, and Micah’s close call

    Tesla sold 5000 Cybertrucks in Q2 and Optimus is in Chaos

    2 PCS Bike or Motorcycle Chain Washer, Motorcycle Chain Cleaning Brush Tool Kit,…

    2 PCS Bike or Motorcycle Chain Washer, Motorcycle Chain Cleaning Brush Tool Kit,…

    Tesla launches Oasis Supercharger with solar farm and off-grid batteries

    Tesla launches Oasis Supercharger with solar farm and off-grid batteries

    5PCS Wheel Lock Nut Key Removal Kit for Tesla Model 3 & Model Y & Model X & Model S &…

    5PCS Wheel Lock Nut Key Removal Kit for Tesla Model 3 & Model Y & Model X & Model S &…

    2 PCS Trailer Hitch Coupler Lock, Dia 1/4 Inch 3/4 Inch Span Trailer Hitch Lock with…

    2 PCS Trailer Hitch Coupler Lock, Dia 1/4 Inch 3/4 Inch Span Trailer Hitch Lock with…

    Center Console Dashboard Organizer for 2024-2025 2026 Tesla Cybertruck Accessories,…

    Center Console Dashboard Organizer for 2024-2025 2026 Tesla Cybertruck Accessories,…

    Motor Trend Grand Prix Tire Tread Rubber Car Floor Mats for Autos SUV Truck & Van -…

    Motor Trend Grand Prix Tire Tread Rubber Car Floor Mats for Autos SUV Truck & Van -…

  • UFO
    Roswell – Season 3

    Roswell – Season 3

    I Want to Believe 2: UFOs & UAPs [DVD]

    I Want to Believe 2: UFOs & UAPs [DVD]

    The Astonishing Truth Behind UFO Sightings

    The Astonishing Truth Behind UFO Sightings

    GPS Drones with Camera for Adults 4K, Brushless Motor FPV RC Quadcopter with Auto Return, Follow Me, Headless Mode, 50 Mins Long Flight, Lightweight and Foldable Drone for Beginner

    GPS Drones with Camera for Adults 4K, Brushless Motor FPV RC Quadcopter with Auto Return, Follow Me, Headless Mode, 50 Mins Long Flight, Lightweight and Foldable Drone for Beginner

    Ancient Aliens and UFOs: 5 UFO sightings in same month July 1952 in different world places

    Ancient Aliens and UFOs: 5 UFO sightings in same month July 1952 in different world places

    Linen Shirts for Men Casual Short Sleeve Button Down Shirt Cool Summer Beach Wedding Vacation Tops

    Linen Shirts for Men Casual Short Sleeve Button Down Shirt Cool Summer Beach Wedding Vacation Tops

    We Discovered an Alien-Like World Below in Antarctica!

    We Discovered an Alien-Like World Below in Antarctica!

    Zengjo Mens Workout Shirts Quick Dry Short Sleeve Athletic Tee Moisture Wicking Top for Running Gym Fitness Training

    Zengjo Mens Workout Shirts Quick Dry Short Sleeve Athletic Tee Moisture Wicking Top for Running Gym Fitness Training

    Ancient Aliens: The Amphibious Gods of Ancient Babylon (Season 14) | History

    Ancient Aliens: The Amphibious Gods of Ancient Babylon (Season 14) | History

No Result
View All Result
  • TC
  • AI
    Artificial Intelligence

    Transforming network operations with AI: How Swisscom built a network assistant using Amazon Bedrock

    Artificial Intelligence

    EgoDex: Learning Dexterous Manipulation from Large-Scale Egocentric Video

    Artificial Intelligence

    Instruction-Following Pruning for Large Language Models

    Artificial Intelligence

    How to Combine Streamlit, Pandas, and Plotly for Interactive Data Apps

    Artificial Intelligence

    Tailor responsible AI with new safeguard tiers in Amazon Bedrock Guardrails

    Artificial Intelligence

    Automate Data Quality Reports with n8n: From CSV to Professional Analysis

    Artificial Intelligence

    NewDay builds A Generative AI based Customer service Agent Assist with over 90% accuracy

    Artificial Intelligence

    5 Things You Need to Know About Agentic AI

    Artificial Intelligence

    Normalizing Flows are Capable Generative Models

  • App Zone
    Top 3 Launcher Apps for Apple: Features, Pros, and Cons

    Top 3 Launcher Apps for Apple: Features, Pros, and Cons

    Top 3 Launcher Apps for Android: Features, Pros, and Cons

    Top 3 Launcher Apps for Android: Features, Pros, and Cons

    Top 3 Card Game Apps of 2025: Features, Pros, and Cons

    Top 3 Card Game Apps of 2025: Features, Pros, and Cons

    Top 3 Medical Apps of 2025: Features, Pros, and Cons

    Top 3 Medical Apps of 2025: Features, Pros, and Cons

    Top 3 Travel Apps of 2025: Features, Pros, and Cons

    Top 3 Travel Apps of 2025: Features, Pros, and Cons

    Top 3 Casual Game Apps for 2025: Features, Pros, and Cons

    Top 3 Casual Game Apps for 2025: Features, Pros, and Cons

    Top 3 Food Apps for 2025: Features, Pros, and Cons

    Top 3 Food Apps for 2025: Features, Pros, and Cons

    Top 3 Sport Apps for 2025: Features, Pros, and Cons

    Top 3 Sport Apps for 2025: Features, Pros, and Cons

    Top 3 Productivity Apps for 2025: Features, Pros, and Cons

    Top 3 Productivity Apps for 2025: Features, Pros, and Cons

  • Apple
    Foldable iPads, Apple Intelligence blowback, new Apple Music Radio stations

    MacBook with iPhone CPU rumors, AI Siri partnerships, new EU App Store rules

    July 3, 2025 – iOS 26 features we use everyday

    DOJ lack of TikTok ban enforcement reasoning revealed in letters

    DOJ lack of TikTok ban enforcement reasoning revealed in letters

    New Mac models through 2026 revealed in leaked Apple identifiers

    New Mac models through 2026 revealed in leaked Apple identifiers

    Apple Music iOS 26 vs iOS 18: features compared

    Apple Music iOS 26 vs iOS 18: features compared

    New wallpapers from Apple now available for iPhone, iPad, Mac

    New wallpapers from Apple now available for iPhone, iPad, Mac

    Five new Apple products are coming soon in early 2025, here’s what to expect

    Apple to release Q3 2025 earnings results on Thursday, July 31

    Apple to reveal tariff-stricken Q3 results on July 31

    Apple to reveal tariff-stricken Q3 results on July 31

    Apple is right to ditch iPad Fold in favor of the iPhone Fold

    Apple is right to ditch iPad Fold in favor of the iPhone Fold

  • Retro Rewind
    Retro Rewind: Electronic Games April 1995

    Retro Rewind: Electronic Games April 1995

    Retro Rewind: Electronic Gaming Monthly Magazine Number 55 February 1994

    Retro Rewind: Electronic Gaming Monthly Magazine Number 57 April 1994

    Retro Rewind: Blast from the Past – 35 Iconic Commercials of 1988!

    Retro Rewind: Blast from the Past – 35 Iconic Commercials of 1988!

    Retro Rewind: PC World Magazine August 1998

    Retro Rewind: PC World Magazine August 1998

    Retro Rewind: Computer Shopper Magazine September 1997

    Retro Rewind: Computer Shopper Magazine September 1997

    Retro Rewind: PC Magazine December 2015

    Retro Rewind: PC Magazine December 2015

    Retro Rewind: EDGE Magazine RETRO #1: The Guide to Classic Videogame Playing and Collecting

    Retro Rewind: EDGE Magazine RETRO #1: The Guide to Classic Videogame Playing and Collecting

    Retro Rewind: Computer Gaming World Magazine Issue 73 December 1998

    Retro Rewind: Computer Gaming World Magazine Issue 73 December 1998

    Retro Rewind: Electronic Gaming Monthly Magazine Number 55 February 1994

    Retro Rewind: Electronic Gaming Monthly Magazine Number 55 February 1994

  • Tech Deals
    CableCreation Short USB C Cable 1FT Bundle with Micro USB to USB C Cable 0.65FT

    CableCreation Short USB C Cable 1FT Bundle with Micro USB to USB C Cable 0.65FT

    Apple iPad (5thGEneration) Wi-Fi, 128GB – Space Gray (Renewed)

    Apple iPad (5thGEneration) Wi-Fi, 128GB – Space Gray (Renewed)

    Soundcore Anker Motion Boom Plus IP67 Outdoor Speaker with 80W Stereo Sound, Black

    Soundcore Anker Motion Boom Plus IP67 Outdoor Speaker with 80W Stereo Sound, Black

    ADATA 2TB Premium SSD for PS5 PCIe Gen4 M.2 2280 Internal Gaming SSD Up to 7400 MB/s…

    ADATA 2TB Premium SSD for PS5 PCIe Gen4 M.2 2280 Internal Gaming SSD Up to 7400 MB/s…

    MageGee Portable 60% Mechanical Gaming Keyboard, MK-Box LED Backlit Compact 68 Keys Mini…

    MageGee Portable 60% Mechanical Gaming Keyboard, MK-Box LED Backlit Compact 68 Keys Mini…

    Skytech King 95 Gaming PC Desktop, Ryzen 7 9800X3D 4.7 GHz (5.2 GHz Turbo Boost), NVIDIA…

    Skytech King 95 Gaming PC Desktop, Ryzen 7 9800X3D 4.7 GHz (5.2 GHz Turbo Boost), NVIDIA…

    Logitech G502 HERO High Performance Wired Gaming Mouse, HERO 25K Sensor, 25,600 DPI,…

    Logitech G502 HERO High Performance Wired Gaming Mouse, HERO 25K Sensor, 25,600 DPI,…

    Minecraft – PlayStation 3 (Renewed)

    Minecraft – PlayStation 3 (Renewed)

    Carcassonne Board Game (BASE GAME) – Classic Tile-Laying Strategy for All Ages, Medieval…

    Carcassonne Board Game (BASE GAME) – Classic Tile-Laying Strategy for All Ages, Medieval…

  • Tech Eats
    Cheesy Broccoli Rice Mug: 5-Minute Super Comfort Food

    Cheesy Broccoli Rice Mug: 5-Minute Super Comfort Food

    Top 10 Vegetarian Recipes for 2025: Easy and Nutritious Meals for Busy People

    Top 10 Vegetarian Recipes for 2025: Easy and Nutritious Meals for Busy People

    Bacon Mug Lasagna: 5-Minute Microwave Meat Lover’s Dream

    Bacon Mug Lasagna: 5-Minute Microwave Meat Lover’s Dream

    Bacon Fried Rice Mug: 5-Minute Microwave Meal

    Bacon Fried Rice Mug: 5-Minute Microwave Meal

    Bacon & Cheddar Mug Biscuit: 2-Minute Savory Comfort

    Bacon & Cheddar Mug Biscuit: 2-Minute Savory Comfort

    Loaded Bacon Cheesy Potato Mug: 5-Minute Comfort Food

    Loaded Bacon Cheesy Potato Mug: 5-Minute Comfort Food

    Peanut Butter Banana Mug Muffin: 5-Minute Protein Snack

    Peanut Butter Banana Mug Muffin: 5-Minute Protein Snack

    Oreo Mug Cake: 2-Minute Cookie & Cake Combo!

    Oreo Mug Cake: 2-Minute Cookie & Cake Combo!

    Tiramisu Mug Cake: Coffee Lover’s Dream in 2 Minutes!

    Tiramisu Mug Cake: Coffee Lover’s Dream in 2 Minutes!

  • Tesla
    for Garmin GPS Car Mount 2 Pack Replacement Adhesive 17mm Ball Mount Dashboard…

    for Garmin GPS Car Mount 2 Pack Replacement Adhesive 17mm Ball Mount Dashboard…

    2PCS Soft Microfiber Car Dash Duster Brush, Mini Multi-Functional Car Cleaning Brush for…

    2PCS Soft Microfiber Car Dash Duster Brush, Mini Multi-Functional Car Cleaning Brush for…

    Tesla employees try to oust Elon, new Volvo, and Micah’s close call

    Tesla sold 5000 Cybertrucks in Q2 and Optimus is in Chaos

    2 PCS Bike or Motorcycle Chain Washer, Motorcycle Chain Cleaning Brush Tool Kit,…

    2 PCS Bike or Motorcycle Chain Washer, Motorcycle Chain Cleaning Brush Tool Kit,…

    Tesla launches Oasis Supercharger with solar farm and off-grid batteries

    Tesla launches Oasis Supercharger with solar farm and off-grid batteries

    5PCS Wheel Lock Nut Key Removal Kit for Tesla Model 3 & Model Y & Model X & Model S &…

    5PCS Wheel Lock Nut Key Removal Kit for Tesla Model 3 & Model Y & Model X & Model S &…

    2 PCS Trailer Hitch Coupler Lock, Dia 1/4 Inch 3/4 Inch Span Trailer Hitch Lock with…

    2 PCS Trailer Hitch Coupler Lock, Dia 1/4 Inch 3/4 Inch Span Trailer Hitch Lock with…

    Center Console Dashboard Organizer for 2024-2025 2026 Tesla Cybertruck Accessories,…

    Center Console Dashboard Organizer for 2024-2025 2026 Tesla Cybertruck Accessories,…

    Motor Trend Grand Prix Tire Tread Rubber Car Floor Mats for Autos SUV Truck & Van -…

    Motor Trend Grand Prix Tire Tread Rubber Car Floor Mats for Autos SUV Truck & Van -…

  • UFO
    Roswell – Season 3

    Roswell – Season 3

    I Want to Believe 2: UFOs & UAPs [DVD]

    I Want to Believe 2: UFOs & UAPs [DVD]

    The Astonishing Truth Behind UFO Sightings

    The Astonishing Truth Behind UFO Sightings

    GPS Drones with Camera for Adults 4K, Brushless Motor FPV RC Quadcopter with Auto Return, Follow Me, Headless Mode, 50 Mins Long Flight, Lightweight and Foldable Drone for Beginner

    GPS Drones with Camera for Adults 4K, Brushless Motor FPV RC Quadcopter with Auto Return, Follow Me, Headless Mode, 50 Mins Long Flight, Lightweight and Foldable Drone for Beginner

    Ancient Aliens and UFOs: 5 UFO sightings in same month July 1952 in different world places

    Ancient Aliens and UFOs: 5 UFO sightings in same month July 1952 in different world places

    Linen Shirts for Men Casual Short Sleeve Button Down Shirt Cool Summer Beach Wedding Vacation Tops

    Linen Shirts for Men Casual Short Sleeve Button Down Shirt Cool Summer Beach Wedding Vacation Tops

    We Discovered an Alien-Like World Below in Antarctica!

    We Discovered an Alien-Like World Below in Antarctica!

    Zengjo Mens Workout Shirts Quick Dry Short Sleeve Athletic Tee Moisture Wicking Top for Running Gym Fitness Training

    Zengjo Mens Workout Shirts Quick Dry Short Sleeve Athletic Tee Moisture Wicking Top for Running Gym Fitness Training

    Ancient Aliens: The Amphibious Gods of Ancient Babylon (Season 14) | History

    Ancient Aliens: The Amphibious Gods of Ancient Babylon (Season 14) | History

No Result
View All Result
Techcratic
No Result
View All Result
Home Hacker News

8 High-Impact Bugs and How HackerOne Customers Avoided a Breach: Information Disclosure

Hacker News by Hacker News
February 7, 2025
in Hacker News
Reading Time: 6 mins read
126
A A
0

johnk
2019-11-07 19:00:00
www.hackerone.com

This blog series counts down 8 high-impact vulnerability types, along with examples of how HackerOne helped avoid breaches associated with them. This is the second in the series after we kicked things off with Privilege Escalation.

We selected these 8 vulnerability types based on a combination of OWASP Top 10 as well as HackerOne’s recent analysis of the Top 10 Most Impactful and Rewarded Vulnerability Types. Then we consulted Hacktivity, the largest directory of publicly disclosed vulnerability reports. We grabbed examples of how our ingenious security researchers helped HackerOne customers avoid costly breaches associated with each type of vulnerability.

Today’s vulnerability, Information Disclosure, gives us an opportunity to show how HackerOne “dogfoods” our own public Bounty and public disclosure. Default to Disclosure is, after all, one of HackerOne’s five company values.

High Impact Bugs

 

Information Disclosure

According to Mitre, an Information Disclosure (or Exposure as Mitre call it in CWE 200) vulnerability happens when information is disclosed to an actor that is not explicitly authorized to access that information. There are two principal types:

  1. When the information disclosed is regarded as sensitive within the product’s own functionality, such as a private message
  2. If the disclosure provides information about the product or its environment that could be useful in an attack but is normally not available to the attacker, such as the installation path of a product that is remotely accessible.

HackerOne ranked this vulnerability third overall on our list of top ten most impactful and rewarded vulnerabilities. And as the figure below shows, the prevalence of this vulnerability is particularly high in the Federal Government sector, where it represents 27% of the total report volume.

As we’ll see in the following example from Hacktivity, @yashrs and @milindpurswani were able to query confidential data on www.hackerone.com through a GraphQL endpoint.  

How HackerOne Avoided an Information Disclosure Breach

On January 31st, 2019, a little over one month after the HackerOne engineering team pushed a new GraphQL feature into production, @yashrs reported that “The GraphQL endpoint doesn’t have access controls implemented properly.”

The report continues “any attacker can get personally identifiable information of users of Hackerone such as email address, backup hash codes, facebook_user_id, account_recovery_phone_number_verified_at, totp_enabled, etc.”

Thanks to the great and timely report, HackerOne was able to implement a short-term fix on January 31st, 2019 at 9:46 PM, only 2 hours after the vulnerability was reproduced. Research by the engineering team determined that the vulnerability had not been exploited by any criminals and no sensitive information had been breached. 

Potential Business Impact

The HackerOne team determined that sensitive information of multiple objects was exposed by this vulnerability. The GraphQL schema enables anyone to query the users on the platform. This is an intentional design decision. However, because every User object could be accessed, a significant amount of confidential information was accessible. 

It was further determined that certain Team data was inappropriately accessible via this misconfiguration. It was possible to obtain internal triage notes and the policy of a select number of private programs the user did not have access to. The reporters queried partial program information, but they did not obtain any sensitive information that warranted HackerOne to reach out to any customers.

Due to the potential impact, this report was classified as Critical and paid a bounty of $20,000.

Naval ROTC Scholarship Hopeful Helps U.S. Department of Defense Avoid an Information Disclosure Breach

Hacker Aaron Esau, who goes by the alias @arinerron2, and two additional team members, reported a Critical Information Disclosure bug through DoD’s HackerOne Response VDP on August 19, 2019. As Aaron explains in his excellent blog write-up, he has been exploring the DoD’s program on HackerOne in part because he intends to apply for the Naval ROTC scholarship when he pursues college in 2020. 

Aaron performed reconnaissance by doing an unauthenticated web path scan on the subdirectory /nrotc when he discovered a page called Trace.axd that returned the HTTP status code 302 and redirected to a login page.

With a bit more digging, Aaron found that through this page he was able to access social security numbers, usernames, email addresses, plaintext passwords, session tokens, CSRF tokens, and of course, application-specific details (e.g. information about the software and filesystem), and headers for the HTTP traffic.

DoD Thanks Aaron Publicly

After reproducing the bug, marking it Critical, fixing it, and disclosing the report, DoD took the extra step of thanking Aaron on twitter for the great find and report:

Next up in our series of 8 high impact vulnerabilities will look at SQL Injection and how your favorite coffee tastes much better without one—so stay tuned!



Source Link


Keep your files stored safely and securely with the SanDisk 2TB Extreme Portable SSD. With over 69,505 ratings and an impressive 4.6 out of 5 stars, this product has been purchased over 8K+ times in the past month. At only $129.99, this Amazon’s Choice product is a must-have for secure file storage.

Help keep private content private with the included password protection featuring 256-bit AES hardware encryption. Order now for just $129.99 on Amazon!


Start your free Amazon Prime trial
today and unlock unlimited streaming and more!

Help Power Techcratic’s Future – Scan To Support

If Techcratic’s content and insights have helped you, consider giving back by supporting the platform with crypto. Every contribution makes a difference, whether it’s for high-quality content, server maintenance, or future updates. Techcratic is constantly evolving, and your support helps drive that progress.

As a solo operator who wears all the hats, creating content, managing the tech, and running the site, your support allows me to stay focused on delivering valuable resources. Your support keeps everything running smoothly and enables me to continue creating the content you love. I’m deeply grateful for your support, it truly means the world to me! Thank you!

BITCOIN

Bitcoin Logo

Bitcoin QR Code

bc1qlszw7elx2qahjwvaryh0tkgg8y68enw30gpvge

Scan the QR code with your crypto wallet app

DOGECOIN

Dogecoin Logo

Dogecoin QR Code

D64GwvvYQxFXYyan3oQCrmWfidf6T3JpBA

Scan the QR code with your crypto wallet app

ETHEREUM

Ethereum Logo

Ethereum QR Code

0xe9BC980DF3d985730dA827996B43E4A62CCBAA7a

Scan the QR code with your crypto wallet app

Please read the Privacy and Security Disclaimer on how Techcratic handles your support.

Disclaimer: As an Amazon Associate, Techcratic may earn from qualifying purchases.

Tags: Hacker News
Share162Share28ShareShare4ShareTweet101
Previous Post

Windows 10’s extended support starts at $61 per device, Microsoft reveals new details

Next Post

OpenAI responds to DeepSeek competition with detailed reasoning traces for o3-mini

Hacker News

Hacker News

Stay updated with Hacker News, where technology meets entrepreneurial spirit. Get the latest on tech trends, startup news, and discussions from the tech community. Read the latest updates here at Techcratic.

Related Posts

Catwatchful Android Spyware Leaks Credentials of 62,000+ Users
Hacker News

Catwatchful Android Spyware Leaks Credentials of 62,000+ Users

July 4, 2025
1.3k
LooksMapping
Hacker News

LooksMapping

July 4, 2025
1.3k
you are what you launch: how software became a lifestyle brand
Hacker News

you are what you launch: how software became a lifestyle brand

July 3, 2025
1.3k
Parallelizing SHA256 calculation on FPGA
Hacker News

Parallelizing SHA256 calculation on FPGA

July 3, 2025
1.3k
misorrek/ViscaCamLink: Camera control application for PTZ cameras using the VISCA protocol
Hacker News

misorrek/ViscaCamLink: Camera control application for PTZ cameras using the VISCA protocol

July 3, 2025
1.3k
Apache Tomcat and Camel Vulnerabilities Actively Targeted in Cyberattacks
Hacker News

Apache Tomcat and Camel Vulnerabilities Actively Targeted in Cyberattacks

July 3, 2025
1.3k
Threat Actors Exploit .COM TLD to Host Widespread Credential Phishing Sites
Hacker News

Threat Actors Exploit .COM TLD to Host Widespread Credential Phishing Sites

July 3, 2025
1.3k
Kazedaa/eBAF: You wouldnt Download an Ad. But you would block one.
Hacker News

Kazedaa/eBAF: You wouldnt Download an Ad. But you would block one.

July 3, 2025
1.3k
Load More
Next Post
OpenAI responds to DeepSeek competition with detailed reasoning traces for o3-mini

OpenAI responds to DeepSeek competition with detailed reasoning traces for o3-mini

Your Tech Resources

  • 30 Second Tech ™
  • AI
  • App Zone ™
  • Apple
  • Ars Technica
  • CNET
  • ComputerWorld
  • Crypto News
  • Cybersecurity
  • Endgadget
  • Forbes
  • Fossbytes
  • Gaming
  • GeekWire
  • Gizmodo
  • Google News
  • Hacker News
  • Harvard Tech
  • I Like Cats ™
  • I Like Dogs ™
  • LifeHacker
  • MacRumors
  • Macworld
  • Mashable
  • Microsoft
  • MIT Tech
  • PC World
  • Photofocus
  • Physics
  • Random Tech
  • Retro Rewind ™
  • Robot Report
  • SiliconANGLE
  • SlashGear
  • Smartphone
  • StackSocial
  • Tech Art
  • Tech Careers
  • Tech Deals
  • Techcratic ™
  • TechCrunch
  • Techdirt
  • TechRepublic
  • Techs Got To Eat ™
  • TechSpot
  • Tesla
  • The Verge
  • TNW
  • Trusted Reviews
  • UFO
  • VentureBeat
  • Visual Capitalist
  • Wired
  • ZDNet

Tech News

  • 30 Second Tech ™
  • AI
  • Apple Insider
  • Ars Technica
  • CNET
  • ComputerWorld
  • Crypto News
  • Cybersecurity
  • Endgadget
  • ExtremeTech
  • Fossbytes
  • Gaming
  • GeekWire
  • Gizmodo

Tech News

  • Harvard Tech
  • MacRumors
  • Macworld
  • Mashable
  • Microsoft
  • MIT Tech
  • Physics
  • PC World
  • Random Tech
  • Retro Rewind ™
  • SiliconANGLE
  • SlashGear
  • Smartphone
  • StackSocial
  • Tech Careers

Tech News​

  • Tech Art
  • TechCrunch
  • Techdirt
  • TechRepublic
  • Techs Got To Eat ™
  • TechSpot
  • Tesla
  • The Verge
  • TNW
  • Trusted Reviews
  • UFO
  • VentureBeat
  • Visual Capitalist
  • Wired
  • ZDNet

Site Links

  • About Techcratic
  • Affiliate Disclaimer
  • Affiliate Link Policy
  • Contact Techcratic
  • Dealors Discount Store
  • Privacy and Security Disclaimer
  • Privacy Policy
  • RSS Feed
  • Site Map
  • Support Techcratic
  • Techcratic
  • Tech Deals
  • TOS
  • 𝕏
Click For A Secret Deal

Techcratic – Your All In One Tech Hub © 2020 – 2025
All Rights Reserved
∞

No Result
View All Result
  • 30 Second Tech ™
  • AI
  • App Zone ™
  • Apple
  • Ars Technica
  • CNET
  • Crypto News
  • Cybersecurity
  • Endgadget
  • Gaming
  • I Like Cats ™
  • I Like Dogs ™
  • MacRumors
  • Macworld
  • Tech Deals
  • Techcratic ™
  • Techs Got To Eat ™
  • Tesla
  • UFO
  • Wired