Anon found infinite money😀✌🏿

[-]

NorthKoreanKnuckles@reddit

There was a guy who got rich by sending invoices to google. And google simply paid it.

So yes. It could work.

[-]

bro0t@reddit

He got caught bc he flew too close to the sun and started billing them more and more right?

[-]

Xardnas69@reddit

What ended up happening with that guy? Cause technically that's not fraud or anything, it's perfectly legal to just send someone an invoice

[-]

Hyper669@reddit

Human greed is such a fascinating thing...

[-]

maicii@reddit

I was always curious, for educationally purpose, how do you even send a company an invoice like that?

[-]

AmbitionOfPhilipJFry@reddit

Social engineering.

Find out the company's financial person.

Figure out the email combo for the first last name.

Send them an invoice that looks official.

?

Profit.

[-]

You think so (? I assume he send them at the company email or something directly? Anyways this might be a stupid question. I’ve never had a company, but do they really just get random invoices on email and someone clicks them and pays them? Ain’t no way it’s actually that stupid no?

[-]

Craftybalance2@reddit

I sometimes bill companies that do over 50 mil per year, and i just use the mail on the site. Although once you get to companies who do more than that ive always had to use a dedicated mail that was given to me.

[-]

plaguelivesmatter@reddit

Uh, yeah, it is, sometimes. Lol

[-]

Dragonbut@reddit

I work in IT and I've seen this happen lol. One of my dad's coworkers also processed a nothing invoice for like $10,000 once, no confirmation of what it was for or anything. I get so many emails asking me if invoice emails are legitimate and I'm glad that they're at least checking instead of clicking the first link they see and just filling out whatever form is on it like they're an assembly line with no thoughts, but I still think it's funny that they think I can somehow tell if the invoice is actually for a real service their company paid for. I've also had times where I told someone specifically to call their contact at the company that the invoice is from using a number that they already had, not the one from the email, only to have the person call the number that was in the email and say "they said it was real so I paid it", though luckily that one was actually real

[-]

NorthKoreanKnuckles@reddit

"It's real sir, do not redeem."

[-]

nowuxx@reddit

And then you get sued

[-]

thr33beggars@reddit

Then you call the lawyers office and offer to try to hack their systems to see if there are any holes, and if you find any you offer to plug them so no bad hackers can get in. But then you delete your name from their database and poof, you’re like a ghost

[-]

Icefox119@reddit

see if there are any holes, and

offer to plug them so ~~no~~ bad

( ͡° ͜ʖ ͡°)

[-]

konohasaiyajin@reddit

> have hole

> people pay to plug it

the real infinite money glitch

[-]

Xardnas69@reddit

Literally the oldest infinite money glitch in human history, actually predates money. Still not patched

[-]

JuxtaThePozer@reddit

you're assuming OP can "hack" to begin with

[-]

YoungDiscord@reddit

"Your honour, OP is misleading the client, here's the evid-"

https://i.redd.it/hhd7d9aisazg1.gif

[-]

Treesn@reddit

Metalocalypse 🤘

[-]

YoungDiscord@reddit

nothiiiiiiiiiiiiinnnnnnngggggg

[-]

SecretImaginaryMan@reddit

gif

[-]

newnewdrugsaccount@reddit

I hope you're hungry. For nothing.

[-]

SymDoesReddit@reddit

gif

[-]

Electr0bear@reddit

Exactly. If you provide sich services you are liable for possible future incidents. Sort of the same thing when technicians provide some maintenance and then label / seal critical components with the info of who has done the maintenance.

[-]

Rubmynippleplease@reddit

Not really? You’re not liable for future incidents if you provide this service unless your contract is dog water. Any contract is going to have clauses covering their ass. No security company will ever guarantee that their services cover any future event. A cyber security company can provide a flawless service and some engineer can get phished the next day for instance.

You aren’t going to get successfully sued because they got hacked, you’re going to get sued when you give the client a report of a bunch of shit you didn’t do. You have to sue someone and prove they were negligent.

The equivalent to this is not a technician servicing an A/C unit. The equivalent is someone auditing the AC system for the entire building and making recommendations for ongoing maintenance. If one of them breaks you can’t sue the guy. If his contract states he spot checked 5 machines and reviewed the last 5 years of maintenance records but there isn’t a single record of the guy ever entering your building to do his job then you can sue him.

[-]

wedditmod@reddit

Not true I got my company pentested in 1985 and last year some ai kid hacked my shit and took all of my company's sensitive user data. I sued the guy 40 years later and made 100 bajillion rupees which is ~$3.50.

[-]

maicii@reddit

Are you do? My guess would be these companies make a contract in which you are not allowed to do sue then afterwards.

[-]

spicypsudo@reddit

Put in section 69 paragraph 420 of the TOS that you legally have to pay and cannot sue if you don't find an exploit.

[-]

Boba0514@reddit

and that you aren't liable for any unfound vulnerabilities

[-]

koolmon10@reddit

Yeah this seems like the obvious out here. Even if you did the best pentest ever seen, you can't stop zero-days. You're not guaranteeing the company is unhackable/unreachable, just helping to improve their security.

[-]

europeanputin@reddit

That's why any decent company offering such services also provides a pdf which explains which vulnerabilities were tested and what were the results.

[-]

Alex014@reddit

Can't sue a LLC with no funds. File for bankruptcy rinse and repeat.

[-]

Lord-Chickie@reddit

I mean I didn’t say I’m a very good hacker and that I know how to test those well, did I?

[-]

hobohun7er@reddit

Having worked with a 3rd party security team (Spider Labs), they literally showed a risk that the servers were on the network. So no you can't sue them because you'll agree have to agree with their findings and accept some risks. Such a waste of $50,000 and 2 weeks, but the the corpo overlords loved the service!

[-]

HansWolken@reddit

That's not how it works, you get paid by found vulnerability.

[-]

TeraBaito@reddit

Looking Into This.

[-]

QFB-procrastinator@reddit

Mom said it’s MY turn to repost this!

[-]

Lukebekz@reddit

...I hate that this would work for a while

[-]

Nox_Stripes@reddit

Reminds me when an app of a high profile political party had HUGE security flaws in it, and a german hacker group let them know privately, just for that party to basically try to throw the book at them for daring to do that.

Naturally, after that the hacker group went public with the entire affair (not what the actual flaw was) and made the political party a laughingstock.

[-]

Smexy_Zarow@reddit

Im pretty sure that is not how white hat freelance works.

They get permission, find vulnerabilities, then get paid if they find any.

[-]

DILDOexe@reddit

Only greentext that actually made me laugh in a while 💀

[-]

IudexJudy@reddit

I love posts like this because the very obvious joke is met with Redditors erhm actuallying them lmfao

[-]

khjuu12@reddit

Reddit is second only to Bluesky in the great internet not understanding jokes competition

[-]

QuitWhinging@reddit

Reddit is the only place I regularly visit on the internet where a majority of vocal users will demand that you use "sarcasm tags" to indicate that you were being sarcastic, even when your post was already absolutely dripping with sarcasm. I know a sarcastic tone doesn't always translate well through text and sometimes it can be hard to tell, yada yada yada, but for Christ's sake it's like being forced to say "that was a joke by the way" every time you tell someone a joke. It's socially oppressive and kills the entire vibe of telling a joke.

[-]

blippie@reddit

It's almost required in r/politics, because no matter how stupid and outlandish a statement is, there will be someone who wholeheartedly believes that and actually stands by that. Poes law in effect.

[-]

kp3000k@reddit

you cant understand what you dont know.

/trigger warning sarcasm fr fr

[-]

Select_Angle516@reddit

anytime a joke post uses an invalid IP address met with a thousand entry level programmers saying 🤓 ☝️

[-]

Marci_1992@reddit

I'm behind 20 proxies you'll never find my real IP address of 192.168.1.5 😎

[-]

Grakch@reddit

Is it 192.168.1.5?

[-]

B4rr0th@reddit

Me

[-]

LilXansStan@reddit

Greentexts are only funny if you pretend anon is being 100% serious and genuine

[-]

chubbycanine@reddit

It's all the dipshits that think they know something crawling out from under their rock looking for a bit of validation on how smart they are.

[-]

Maiq_the_liar_23@reddit

Erhm actually the thread is clearly a joke. I am a mod and am reviewing your post history right now. You can expect a ban for 3 days incoming when I find something (I will). I take this role (job) very seriously. I weigh 160kg and haven't seen my penis in 20 years

[-]

SluggySloo@reddit

I hope you find and kill the wizard that made your penis invisible

[-]

Johnscorp@reddit

Please ban me mod-san UwU

[-]

thr33beggars@reddit

I could not help but read anon’s quotes in an Indian accent

[-]

Cerenas@reddit

Funny thing, because they do something similar. I received an email a couple years back that my website has serious vulnerabilities, he said he will give me the details if I pay. Then I did some research and apparently, it's a thing that they use those general scanning tools to find 'security issues' and then spam people about it asking for money without doing any actual work.

[-]