¯\_(ツ)_/¯ bug bounty, hacker or some other thing, who knows anymore ¯\_(ツ)_/¯
Joined September 2014
- Tweets4.2K
- Following1.1K
- Followers364
- Likes11K
@codecancare I saw you were on the top of the leader boards on Etsy's program but looking at the rep points it doesn't look like too many people work on Etsy's program which seems odd but maybe tells me it's extremely hardened or overwhelming.
Do you have any insight to share?
This is dope!!! Hey yeah @renn
This Post is from an account that no longer exists. Learn more
@hacker_ have you written anything about the process you've had to go through with sourcing, sampling, testing, and producing a product? I love the @boringmattress idea & how you were able to tap into that market.
I would love to hear about that process.
Loving Ray's proud and passionate parenting!
@RayRedacted you've raised an impressive young man! We might need to start calling him Sam 'The Flash' Watson!
So glad you proudly shared your son's accomplishments, if not I NEVER would've seen this impressive skill& agility! 👏👏
"That's just how it is. If this repeated, unrelenting banging of your head against a wall..."
@Rhynorater dude! Quit spying on me! I didn't give you permission to use my likeness 🤣🤣🤣
#foundmypeople
+1 on the use of "metric shit-ton"
#definitelyfoundmypeople
Colin Rubbert retweeted
Hey @Shopify @Hacker0x01 ...
I have had two bug hunters come to me and tell me horror stories about your bug bounty lately.
Valid bugs being exploited and you coming out saying... "oh we had planned on fixing that... no impact"
That is NOT the bug bounty contract. If there is a PoC showing the bug was exploitable at ANY time, you should pay the researcher.
Don't contribute to a bug bounty community that makes researchers think bug bounty is a scam.
Also - dont hide behind the new CVSS. Program owners looking to downgrade bugs to save money using the new CVSS and splitting bugs are SUPER scummy.
Contact @G0LDEN_infosec
We see you @WeAreSinclair @komonews we see you! We see what you're doing. Turncoats & traitors the lot of ya.
If ANY of y'all were REAL journalists, you'd report on this, to hell w/your salary! Integrity of more important.
1. @WeAreSinclair is flooding a vast network of local news websites with misleading articles suggesting Biden is mentally unfit
At least 3 articles published this month falsely suggest BIDEN POOPED HIMSELF during an event
The thinly disguised political attacks are given the imprimatur of mainstream media brands, including NBC, ABC, & CBS
🧵
I'm really quite shocked at the good will that Microsoft has earned and are now squandering. This is OLD Microsoft bullshit, Satya should know better than this!
This quoted post is unavailable.
Generate numbers 💕💕
The struggle is real! 🙏
EvenBetter v2.42, EvenBetter: Extensions v2.0 are out!
github.com/bebiksior/EvenBet…
github.com/bebiksior/EvenBet…
To upgrade from v2.31, go to the Settings tab on the Extensions page and click "Update now". The migration script should do everything for you :D
Changelog v2.4
- Moved to the new Caido plugin system! 🎉
- Response preview: you can now preview the response in your browser by clicking the eye icon next to the preview HTML and navigating to the copied URL
- Collections share: you can now export and import collections on the Replay page
- Match & Replace rules share: you can now export and import Match & Replace rules on the Match & Replace page
- OpenAI gpt-4o instead of Caido Assistant: you can now use OpenAI GPT-4o instead of Caido Assistant, you have to provide your API key in the EvenBetter settings
- Generate numbers: you can now generate numbers on the Automate page in the "Simple List" type
- [BETA] private interactsh instances: you can now use private interactsh instances on the Quick SSRF page
Changelog v2.41
- Fixed reordering of the sidebar pages and removed unnecessary setTimeout which should prevent flickering on startup
Changelog v2.42
- Merged PR by @Rhynorater that fixes bug in Match & Replace and adds default match -> name functionality
Colin Rubbert retweeted
the amount of LGBT hate ive seen from the bug bounty community on twitter today is astounding. y’all need to take a good look in the mirror and treat others how you want to be treated. absolutely disgusting. 🏳️🌈
Oh snap! I might have to just have @caido running 24/7 w/a match and replace rule for all google searches 🤣
This Post is from an account that no longer exists. Learn more
Idk, GPT 4o feels so AF to me. I'm having it help me fill out an application. I've provided it a bunch of data, it should really be a non-issue. First it was lazy and pretty much just repeated a quote in my prompt as the answer. Then I have it do the work and it is CRAWLING!
Finally, hunters
- Hunters globally, new and seasoned, get new revenue streams, new opportunities, and an increased seat at the table and respecting the massive effort we put in to have secure these companies and their users.
@0xteknogeek @Rhynorater @nagli
Latest episode of the pod just dropped!
This week we deep-dived the VDP debate that has been happening on twitter (ala @galnagli) and ended up rekindling that hacker vs program manager debate.
It's a spicy one!
ctbb.show/67
- VDP's have to be accountable but have a great winfall with a cyclical flywheel effect
- Platforms get more companies by reducing the barrier to entry by giving new/current companies an additional tax benefit in writing off rewards as marketing promotions/swag donations
3/4
Finally, hunters
- Hunters globally, new and seasoned, get new revenue streams, new opportunities, and an increased seat at the table and respecting the massive effort we put in to have secure these companies and their users.
@0xteknogeek @Rhynorater @galnagli
Gathering information to try and guestimate what yearly operation costs would be to figure out if it's feasible.
Tagging for reach & I value y'all's opinions:
@UK_Daniel_Card @Rhynorater @Jhaddix @AlyssaM_InfoSec @HackingDave @jayesh25 @0xTib3rius @rez0__ @SwiftOnSecurity
How much would you need to make to quit your job and work 100% in a non-profit capacity to hunt, hack, pentest, defend: schools, hospitals, local municipalities, critical infra, etc.
You work solo, at your own pace but turn out results. You only report & advise, not maintain.
28%100k
35%250k
10%500k
27%1m+
457 votes • Final resultsHow much would you need to make to quit your job and work 100% in a non-profit capacity to hunt, hack, pentest, defend: schools, hospitals, local municipalities, critical infra, etc.
You work solo, at your own pace but turn out results. You only report & advise, not maintain.
28%100k
35%250k
10%500k
27%1m+
457 votes • Final results