Conversation

@mattly@hachyderm.io many MANY years ago, when I was first getting involved in security and had just started a github account (long since deleted) I got an email from someone who scraped my details from a repo where I did security patches

they offered me a significant amount of money for some relatively simple XSS related bypass methods in the (back then) actively maintained XSS auditor code of chromium

I refused of course, but to this day, I wonder how many millions of people are being exploited because some random person got an email and some money