<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Config Connector on HackingPassion.com : root@HackingPassion.com-[~]</title><link>https://hackingpassion.com/tags/config-connector/</link><description>Recent content in Config Connector on HackingPassion.com : root@HackingPassion.com-[~]</description><generator>Hugo</generator><language>en</language><lastBuildDate>Tue, 23 Jun 2026 12:12:16 +0200</lastBuildDate><atom:link href="https://hackingpassion.com/tags/config-connector/index.xml" rel="self" type="application/rss+xml"/><item><title>Google Told the Researcher Nice Catch Then Refused to Pay and Never Fixed It</title><link>https://hackingpassion.com/configconfusion-google-no-bounty/</link><pubDate>Tue, 23 Jun 2026 12:12:16 +0200</pubDate><guid>https://hackingpassion.com/configconfusion-google-no-bounty/</guid><description>&lt;p>Google told a security researcher his bug was a nice catch, lined up his payout, then eleven days later called it harmless and refused to pay a cent. The flaw he reported lets anyone with basic Kubernetes access take over a complete Google Cloud organization in about five seconds, with three lines of text and no special permissions at all. Months on, it still is not fixed. He named it &lt;strong>ConfigConfusion&lt;/strong>.&lt;/p></description></item></channel></rss>