[[Reward]] for any live exploits affecting Sythe

Reminder that monetary rewards are available for anyone who reports a live exploit for Sythe.org. Reward will be proportional to severity of exploit.

 

bump

 

Rewards are based on severity of the exploit discovered. Highest amount we have paid out so far has been $100

 

We changed all the vulnerable passwords from the 2014 leak which only affected non-2fa accounts.

We are not facebook or a publicly traded company, we can't afford to pay big. We trust people will do the right thing and inform us.

 

Yes because there are people who used the same weak sythe password for their email accounts. When the database was leaked, the weak passwords were able to be cracked. We changed all the vulnerable password on Sythe. But if they used the same vulnerable password for their email account then the hacker can take control of that email account and use it to recover the sythe account.

Fortunately its usually pretty obvious when an old account pops up with a new IP on it. They are always non-2fa accounts. As I said before, 2fa was never compromised.