PayPal plugs phishing-enabling vulnerability, stumps up $500

PayPal has patched a flaw which created a means for miscreants to abuse its platform to lend authenticity to fraudulent or otherwise malicious emails. The input validation and mail encoding web vulnerability in the official PayPal online web app was discovered by Vulnerability Laboratory researcher Benjamin Kunz Mejri. The …

[Swarthy]

Paypal fixed a fraud-enabling bug?

I call April Fools on this one.

[Anonymous Coward]

$500...???

Wow, the cost of a night-out partying in Moscow! Don't go crazy, spend it all!

At that rate who wants to switch to security / bug hunting.... Let Paypal die!

[Tromos]

Re: $500...???

With ultra-generous payouts like that, Paypal customers can rest assured that any exploits discovered will be immediately reported to Paypal and not fall into the hands of miscreants who could never hope to match such a vast sum.

[Diziet Sma]

Re: $500...???

$500 won't go far on a night out in moscow, unless you only meant beer.

[MR J]

He should be glad he got $500

I reported a problem to Netgear about 18 months ago that allows people to see the admin username and password via the public IP/wan side by just using a crafted URL (no special tools required!).

Their reply to me was that the bug does not exist in new devices so it is a non-issue.

I know this affected many devices, but they don't actually care.

All I got out of it was a "bug verified - support ticket closed".