PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Transparency Builds Trust

hackerone.com | blog | #bug-bounty | #incident-response | #hackerone | #trust | #data-breach | #transparency | #disclosure
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne discloses a bug bounty report that gave a hacker brief access to data tied to under 5% of customer programs. Co-founder Jobert Abma argues defaulting to disclosure builds industry trust.
Published
Collected

Related coverage

blog · hackerone.com
Shopify Celebrates 5 Years on HackerOne
Shopify marks five years on HackerOne with over $1 million in bounties, 1,150+ vulnerabilities resolved, and 450+ public disclosures, crediting transparency and a seven-day bounty payout target.
vulnerability · hackerone.com
Hacktivity Disclosure for Private Programs
HackerOne launched disclosure for private programs, letting reports be shared with fellow participants rather than the whole world. Over 6,000 reports are already disclosed on Hacktivity.
incident · netspi.com
Data Breach Alphabet Soup
Drawing on Theodore Kobus's A-to-Z of healthcare data breaches, the author highlights two: quit retaining unneeded data, and accept that breaches will happen, then train and rehearse response.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
Back