norsey

Today @bugcrowd, we're expanding our product line to offer VDP's for free bugcrowd.com/blog/introduci…, marking the next evolution of our VDP product, following our removal of incentives some time back. This marks a change in the industry, providing a no cost entry point for customers to build up reporting portals, to support hackers in bringing vulnerabilities to them, in a fast, and effective manner. It also allows customers to build exposure to the value of the hacking community, and then pursue other offerings in the managed bug bounty space, or pen testing space, in a paid model, that incentivises findings and discovery, whilst VDP is intended to capture existing known findings. Also, hackers, we hear you, we love you and we know there's more to change around VDP's. This isn't our only change. We're aware of the need to change terms for them, and it's currently an active discussion, as well as better separating VDP from MBB which we've done by removing incentives, and having this offering not list in our program portals. If you've other feedback, we would love to hear it, and welcome it - my slack is always open and you can reach me on HIVE, Bug Bounty Forum, or here over DM

Big congrats to one of the most promising up and coming hackers around! @NinadMishra5 just published an excellent intro to game hacking on the @Bugcrowd channel. Check it out and give him a 👍 #BabyRockstar youtu.be/ernurguiIzg

One of the challenges that comes up in support @Bugcrowd: briefs changing while submissions are pending, which caused scope misunderstandings. Going forward, hackers, customers, and triagers will have access to the original brief at the time of submission. Additionally, we're preserving customer notes during triage to improve accuracy. A big thank you to @bishal0x01, @CharlieEriksen, @imhaxormad who brought this to our attention! 🙏

#ff @evildaemond @arcwhite @vortexau @norsec0de @amalmurali47 @th3cyb3rk1tt3n @mikepatx @painxploiter @dooktwit @codingo_ @mazeheld @davegerryjr @paytoneal @Jhaddix @Bugcrowd @JonnySchnittger @dcuthbert @singe @dakacki @vortexau @halvarflake @wbm312 @carfucar @snyff

@drunkrhin0 Confucius once said: "he who does not take Slack to the lavatory shall lose invites to drunk rhinos"

So who's on bluesky 😅?

oh c’mon now that shit is just lazy

Anyone else remember when telcos used to leave a thick book on your doorstep every year with everyone's name, address and phone number in it? #OptusDataBreach

yo #brazil security folks! wanna come work with @codingo_ @vortexau and the @Bugcrowd team? boards.greenhouse.io/bugcrowd/jobs/… #hiring #bugbountytips #bugbountyjobs

Ever wondered how a QR code works? No, me neither but it's low-key fascinating. (Warning, there is some extremely nerdy shit here.👇 )

@Steelemanbankai @FrankyBro I managed to scan it, took me here: youtu.be/Qskm9MTz2V4

@FrankyBro Still unable to scan it. But upon closer inspection it looks like there is numbers. A big 3, partially covered 5 and maybe a small 7 at the top. Also possible letters T, E. I need more pixels. XD. If anyone is able to get a actual scan on it or sees anything else, plz post.

Congrats! Your next clue is "N" good luck with finding the rest! (You've already missed 3, and chronological order is important) Shameless plug follow me you dummy <3

Welp. It’s the crypto bug of the year. Mark it down for April. Java 15-18 ECDSA doesn’t sanity check that the random x coordinate and signature proof are nonzero; a (0,0) signature validates any message. Breaks JWT, SAML, &c. neilmadden.blog/2022/04/19/psy…

Most people suck at managing up. They waste their boss’ time with too much (or too little) information. Here’s how to give the right amount of context:

New VLOG!! 🎥 This is my first-ever vlog where I ended up touring the @Bugcrowd office & also met @caseyjohnellis youtu.be/fByTZ409uuU

@aymanshargawi1 @SecurityTube This was at BSides Las Vegas in 2014. 11/10 Highly recommend the BSides conferences, check them out @BSidesLV

@norsec0de @SecurityTube where are these confernces held and how could anyone enroll?

"you know when you study something and it tickles your autism?" ~ @kymb0_irl © 2021

@DuduzaneZuma_ Did this idiot just label his father as "too big to fail"?

President Jacob Zuma. #FreeZuma #KZNshutdown #ShutdownKZN #FreeZumaNow #GautengShutdown

@kymb0_irl The only thing Windows should be used for is running shellcode

"𝐼'𝑑 𝑟𝑎𝑡ℎ𝑒𝑟 𝑏𝑒 𝑢𝑛𝑒𝑚𝑝𝑙𝑜𝑦𝑒𝑑 𝑡ℎ𝑎𝑛 𝑢𝑠𝑒 𝑊𝑖𝑛𝑑𝑜𝑤𝑠, 𝑜𝑟 𝑎 𝐷𝑒𝑙𝑙" - @norsec0de 2k21

@osiryszzz @kymb0_irl long time mate

@norsec0de @kymb0_irl yo sup long time no talk amigo

everyone, meet @kymb0_irl, a talented young lad who pwns all the things, despite growing up in NT.