PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Bug Bounty 5 Years In

hackerone.com | blog | #bug-bounty | #program-management | #guest-post | #facebook | #uber
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Guest post by Facebook's Collin Greene on five years of bug bounties: why the model beats traditional security spending, and lessons from launching the Facebook and Uber programs.
Published
Collected

Related coverage

tool · bugcrowd.com
[Guest Blog] Skyscanner’s Adventures in Bug Bounties
Skyscanner recounts its bug bounty journey: after a rocky first trial, a two-week Bugcrowd Flex program drew 49 researchers who surfaced 140-plus bugs, with 43 triaged and a top payout of $2,000.
blog · hackerone.com
Challenge Your Testing Fears With the Help of Code Review
Andrew Tate's fourth guest post: Stack Overflow's 2019 survey shows over a third of developers don't test their code, and he uses PullRequest code review to build his first automated test suite.
blog · hackerone.com
Solving Problems Collaboratively Through Code Review
Andrew Tate's third guest post: treating code review as dialogue-asking reviewers for guidance instead of struggling alone with Stack Overflow-speeds up fixes and builds lasting intuition.
blog · hackerone.com
Learning security one code review at a time
Andrew Tate's second guest post: external code review helps solo developers handle their biggest unknown-security-by catching vulnerabilities that happy-path testing misses.
blog · hackerone.com
3 Lessons Learned from My First Week of Code Review
A writer-turned-developer at Animalz shares lessons from his first week of PullRequest code review: handle the sad paths, not just the happy path, and treat review as collaborative learning.
blog · hackerone.com
How Companies Like Facebook Find the Bugs that Matter
Facebook layers static analysis, production crash data and a bug bounty to find the bugs that matter, while Intel and GitHub show how bounty programs surface high-impact flaws such as Spectre variants.
Back