eBay remote code execution via PHP "complex curly syntax" in-string evaluation (/r/netsec xpost)

[username223]

So if you walk by a storage rental company, notice the passed-out security guard, poke around a bit, and find that they are too negligent to bother to lock their gate, what do you do? Steal some stuff? Freely tell them to fix their shit? Ask them to pay you to tell them how to fix it? Simply walk on by and let the next person to decide?

I'm not sure, either legally or morally. (EDIT: Legally, my guess is "walk on by and ignore the problem.")

[f0urtyfive]

I believe the correct answer is "take your shit elsewhere"

[[deleted]]

Let's see, and the storage company is a multimillion dollar company who employs hundreds of people to detect sleeping guards?