Mi Home password prompt delay bug bounty

Published May 30, 2023

Views 9.43K | Likes 37 | Comments 3

Views#1,657,893

Views#514,692

Channel

ESpoofer

10 subs•4 videos•Apr 2023

Views

9,432

Likes

37

Comments

3

Performance vs. channel

Outlier score

Engagement rate

Revenue estimate

Total (all-time): $7 – $19

Based on estimated $0.7–$2 CPM.

More features coming

We're working on new analytics and tools. Stay tuned.

About

We reported an exploitable delay in the password prompt of Mi Home, while unlocking a Xiaomi e-scooter. Any user can quickly press the lock/unlock button after failing a password prompt, and before the same prompt reappears. We received a 200$ bug bounty from Xiaomi.

Published: May 30, 2023
Made for kids: No

More features coming

We're working on new analytics and tools. Stay tuned.