Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Google Bug Hunters

bughunters.google.com | blog | #bug-bounty | #vulnerability-research | #access-control | #google | #authorization-bypass | #gfile

Summary

A Google Bug Hunters writeup recounting a $100,000 bounty: breaking into GFile — the library fronting Google's internal file systems — by bypassing authorization mechanisms.
Published
Collected

original ↗

Related coverage

  1. Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust (bughunters.google.com)
  2. How to use Codex for Bug Bounty research: explore broadly, validate rigorously (yeswehack.com)
  3. Flounder: Autonomous AI White-Hat Security Auditor with Execution-Grounded Verification (github.com)
  4. More Cryptanalysis Makes Us All Safer (bughunters.google.com)
  5. State divergence enables unauthorized access (blog.trailofbits.com)
  6. We beat Google’s zero-knowledge proof of quantum cryptanalysis (blog.trailofbits.com)

back