User: MegaManSec

Re:unable to replicate findings.

On: PayPal's Two-Factor Authentication Can Be Bypassed Using eBay Bug

If you log in here: https://www.paypal.com/cgi-bin... (Make sure you check it's https://www.paypal.com/ !! ) Does it work? The eBay account that is used in the 'exploit' does NOT have to be associated with the Paypal account. Any eBay account can be used. You can even create a new one, with a completly random email.

Re:Not Arrested, Not Questioned, Not Contacted.

On: Australian Teen Reports SQL Injection Vulnerability, Company Calls Police

Thanks for the link. I hadn't seen that one yet. I agree with Swordfish. I think there are perhaps 10% of readers that have the attitude that any hacking is bad. I've been monitoring the comments sections on all of the articles, and it seems most people that say that I should go to jail for hacking are downvoted to oblivion.

Re:Not Arrested, Not Questioned, Not Contacted.

On: Australian Teen Reports SQL Injection Vulnerability, Company Calls Police

Furthermore, the fact this is the only story you've posted on, shows that you are a troll.

Re:Not Arrested, Not Questioned, Not Contacted.

On: Australian Teen Reports SQL Injection Vulnerability, Company Calls Police

Actually, my username is not linked to any of that. Which means you know me.

Re:Not Arrested, Not Questioned, Not Contacted.

On: Australian Teen Reports SQL Injection Vulnerability, Company Calls Police

I just saw a MySQL error on the page, and knew what had happened. My guess is that they don't have staff that can review apache logs to see what I actually viewed.. So, they want to know I don't have 600,000 records on my computer, basically.

Re:Not Arrested, Not Questioned, Not Contacted.

On: Australian Teen Reports SQL Injection Vulnerability, Company Calls Police

I saw an MySQL error on the page I was viewing. That's it, lol.

Not Arrested, Not Questioned, Not Contacted.

On: Australian Teen Reports SQL Injection Vulnerability, Company Calls Police

Joshua Rogers here. The kid that this article is about.

I want to clear something up..

I have _not_ been arrested(yet).
I have _not_ been questioned(yet).
I have _not_ been officially told that I've been reported to the police(yet).

I'm completly in the blank, as much as the rest of you.
What I'm expecting to happen:
They show up at my doorstep asking questions. .. .... ........
That's it.

They might ask me to sign something that says I have deleted all the data that I saw.

If you have any questions, I can be contacted @megamansec..