Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I found a bug (not security bug) in an apparel companies website allowing unlimited reuse of their £10 of vouchers. I reported and got a free t-shirt :)


If you can exploit it to make economic damage, would that count as a security bug?


Taken to logical extreme, that would make any black PR or reputational attack a security vulnerability.

Infosec is certainly a hefty part of business continuity, but business continuity itself is a much wider topic.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: