“One way you can tell is it’s always such a nice report,” founder tells Ars.

  • Blaster M@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    3 days ago

    I have to wonder if it’s a psyop to drown out legit bug reports with all the fake bug reports

    • Typewar@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      Looking at the bug reporter, the goal rather seems to make money fast and easy. There was several companies that paid this person for their discoveries. Just the case of CURL, it failed to find a vulnerability, essentially wasting their time