Hacker News Reader

Comment by Thorrez | Hacker News Reader

Interesting, Twitter $5,040 bounty to the vulnerability reporter. I've heard it said that website vulnerabilities aren't valuable and thus don't merit large bounties. But if a single copy of the database can be sold for $30k (I'm not sure it actually will), then this is a case of a bounty for a website vuln being much too small.

View on HN

There are a lot of ways to monetize it. Run 2FA attacks on celebrity accounts' phone numbers, dox anon accounts that post racist stuff or follow gay porn and blackmail them, etc etc.

How would one make money out of doxing racists?

Call them, tell them you'll publish an expose with their real name and get them fired from their job unless they pay you $5k.

I don't think that would work. You only get cancelled if you catch the eye of a social media mob. If it's just some random person complaining that X is a racist then I'd bet X's employer would side with X. "No, trust me - I hacked into Twitter and this anime avatar who says racist things is totally your employee. Hello? Hello?"

You could threaten to call up a random person's employer and call them a racist unless they paid you. Seems as likely to work as this would be.

You would need someone high profile enough to get the attention of a social media mob to really threaten people.

You don't need to get the person fired - you need to get them afraid of potentially being fired. Not everyone will do a rational takedown like this, and if they do, you have millions of accounts to dox.

It took one tweet from a random user (@fionafranfeld) to get bodega bro cancelled from his tech job in New York at @outreach_io https://youtu.be/gIraad4RrRw?t=190

Yes, but only because it got social media attention. If it was just one guy offended by bodega bro then nothing would've happened.

The standard black hat data dump monetization scheme (I have been told) is to just try logging in with the same creds at a bunch of banks. Lots of people reuse passwords and you don’t need that many hits to recoup the money.

Reply on news.ycombinator.com