PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Security@ 2018: Oath, DoD Highlight Value in Bringing Bug Bounties to Life

hackerone.com | blog | #bug-bounty | #hackerone | #hacker-community | #department-of-defense | #dod | #security-conference | #panel | #live-hacking | #oath
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

At Security@ 2018, Oath CISO Chris Nims, DDS's Reina Staley, and hacker Frans Rosén discussed how in-person events strengthen bug bounty programs; Oath alone paid $2M in bounties over six months.
Published
Collected

Related coverage

blog · hackerone.com
The World's Elite Hackers Share Tips and Insights
Three hackers who each earned $1M+ in bounties joined a Security@ 2019 panel: they favor programs that pay transparently and triage fast, and advise aspiring hackers not to chase money alone.
blog · hackerone.com
The Best is Yet To Come: DOD Awards New Hack the Pentagon Contract to HackerOne
The DoD's Defense Digital Service expanded Hack the Pentagon, awarding HackerOne a new contract for private bounties on sensitive internal systems after 5,000+ valid vulnerabilities in two years.
blog · hackerone.com
Hacking the U.S. Air Force (again) from a New York City subway station
At h1-212 in New York, Brett Buerhaus and Mathias Karlsson chained a bug that pivoted onto a U.S. DoD network, splitting a record $10,650 government bounty; Hack the Air Force 2.0 tallied 55 findings.
vulnerability · hackerone.com
How the Risk-Averse DoD Learned to Stop Worrying and Love the Hackers
A Security@ 2019 panel traces how the US DoD embraced hackers: its VDP and bounties surfaced 11,000+ valid vulnerabilities, saved taxpayers $64 million in three years and returned roughly 800% ROI.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
Back