VP of Operations @bugcrowd, Hacking Content @ https://xitter.cf/t.co/Ov3ZXfNg5P tools @ https://xitter.cf/t.co/4X3ot71JLf @SecTalks_GC & @BSidesGC co-organiser
Queensland, Australia
Joined September 2013
- Tweets9.4K
- Following767
- Followers34.8K
- Likes20.3K
Michael Skelton retweeted
Well, it’s been an interesting 24 hours to watch this play out and there’s been a lot of conversation about using submission data for training. I want to be very clear on Bugcrowd’s position.
Hackers are and continue to be the heart of @Bugcrowd. We are a part of the community and value the work the researcher community does to help customers identify vulnerabilities.
AI is here to stay and will play a large role in cybersecurity going forward. However, that doesn’t change our commitment to the hacker community.
We’ve been exploring ways to bring hackers along for the journey - not replace them with AI - and have been working in conjunction with members of the community, our own team & our Hacker Advisory Board to figure out the right way to incentivize and monetize AI-driven products for the hackers contributing.
We won’t get everything right, but you have our commitment to be transparent as we strive to get this right and chart a path towards a human+AI future.
Michael Skelton retweeted
Unprompted Australia CFP is open! Send your best research 👇👇👇
The Unprompted.au CFP is officially OPEN! If you are doing cool stuff with AI in offense, defense, or working on core AI tech (from frontier models to open source LLMs), we'd love to hear from you! Submit here: unprompted.au/
Michael Skelton retweeted
I wanted a screenshot tool for macOS better than anything out there, so I built one with @claudeai
Native Swift. No Electron.
Annotate, record screen, scroll capture, auto-redact PII, beautify, upload to Drive & more — one flow.
Free & open source forever.
macshot 🔗👇
Agree... though margins are so thin for farmers, and most people don't like to pay what it costs a larger grower to allow them to sell with the losses they incur without herbicide, unfortunately
Depending how particular you are with chemicals, also be sure to ask properties if they participate in the Woolworths/Coles scrap system. They provide free vegetables by the trailer load for properties to compost/use, but does mean there's going to be trace chemicals that way
If you want to grow yourself, you can source more natural fertilizer via horse properties using the same method. Chickens also work well, provided you compost coop straw to give it time to rest before using it. You can also trade the eggs for vegetables easily.
For QLD, lychee, mango, macadamia, all citrus, guava and avocado are some of the easiest to source this way. I'm sure you know of strawberry sources where you are, but also grapes can be found around the hinterland region quite easily (though more bitter than you may be used to)
Fruits are the easiest, especially citrus, as everybody always has ample. You can get lemons year round easily this way. Eggs are also easy. Vegetables are a lot harder, as most won't grow it in excess, and meat is the hardest, given the regulations around it prevent this
Not easy, but smaller growers do make it easier. Use an LLM to identify what grows each time of the year, and then join Facebook communities for rural areas near you and post asking who has them available
Nice as the idea is, in execution it’s very hard to get enough diversity and calories off the land to fully sustain without outside sources
Michael Skelton retweeted
How do you get into cyber?
Need to bridge the gap from no experience to jr?
Today we are releasing three modules for FREE from our course “Hacking Your Career”!
These modules cover my favorite training resources across every domain: Blue, Purple, and Red additionally organized by cost tier: free, cheap, and expensive.
Each recommendation made the cut because it actually builds skill, and most include certifications you can add to your resume!
executiveoffense.beehiiv.com…
There’s a process called aged submissions that should re-surface these to the customer on a regular basis. It doesn’t look like it trig'd here (since priv comments aren’t showing on the timeline). I’ve raised it to confirm why and to see if we can get this addressed for you now
Not quite following all the specifics here, but if you can send me a sub id ill dig I’ll have someone take another look at this later today for you
You're welcome to that opinion, but it is a Sunday afternoon, father's day, and I've gone to the office, and then taken 30mins out to review your submissions, confirm with you their state, and try to teach you why it's a non-issue
I recommend going back to `9a25e17c-7e8a-40b8-afe6-7d59ceca4324` from three years ago, the two issues are the same and I explained it in more detail to you there.. That same lesson applies also on this newer submission
A good takeaway for your reporting is to always try to answer the question "as a hacker I could", in this case, you can demonstrate a cname is present, but not host content, or impact users or the customer negatively. If you believe otherwise, host an md5 of your username