Top all-time · #5069
Bugcrowd
Company blog · blog.bugcrowd.comsecurity
Bugcrowd is the company blog at blog.bugcrowd.com, writing about security. Since 2013, 15 different Hacker News readers have linked it 31 times. No feed was found, so read it on the site itself.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link Bugcrowd posts that give practical advice for security researchers and bug hunters, including note-taking techniques, a getting-started guide for bug bounty hunting, and legal risks of testing.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
What Hacker News says?
There's a blog post on Bugcrowd about note taking techniques. Might be helpful for you! :) https://blog.bugcrowd.com/the-importance-of-notes-session-tr...
Comment linking /the-importance-of-notes-session-tracking-bug-bounty-hunter-methodology
on “Ask HN: How do you take notes when you're Bug Hunting or Pentesting?”Submitted Bugcrowd Raises $6M Series A as a story · 7 points
HN discussionThere are a ton of different directions that you can head in and focus on. I encourage you to start/look at stuff that you're genuinely interested in and excited about. I've written a "Getting Started" guide for security researchers that people have said is helpful. I hope it helps you out :) https://blog.bugcrowd.com/getting-started-bug-bounty-hunter-...
Comment linking /getting-started-bug-bounty-hunter-methodology
on “How does one become a security researcher?”Submitted Reverse Engineering Pokemon Go as a story · 6 points
HN discussionHere's a blog post that offers advice: https://blog.bugcrowd.com/problem-cold-testing/ tl;dr The laws aren't going to side in your favor. Assuming this is a US-based airline, there are potential laws you should be aware of (Computer Fraud and Abuse Act & another one). But from this very high level, it sounds like you did a good job of cooperating and not disclosing it "inappropriately". It just ends up rubbing peopl…
Comment linking /problem-cold-testing/
on “a thread”Submitted Breaking Bugcrowd's CAPTCHA using Google Tesseract OCR as a story · 6 points
HN discussionSubmitted Startup Security: 6 guidelines to handling a vulnerability submission as a story · 4 points
HN discussionSubmitted Top Bugcrowd Security Hackers of 2013 as a story · 4 points
HN discussionSubmitted On Oracle, Mary Ann Davidson, and the dark side of security research as a story · 3 points
HN discussionSubmitted Using a Braun Shaver to Bypass XSS Audit and WAF as a story · 2 points
HN discussionSubmitted Bug Bounties Drive Sales? OR Why Market Your Bug Bounty Program as a story · 2 points
HN discussionSubmitted When to properly reward a bug bounty submission as a story · 2 points
HN discussionSubmitted Google Sites: A Tale of Five Vulnerabilities as a story · 2 points
HN discussionSubmitted Interview w/ Hacker awarded Facebook's largest bug bounty to date as a story · 2 points
HN discussionSubmitted Target, Neiman Marcus, and Michaels breaches – We can do better as a story · 2 points
HN discussionSubmitted How to bypass 3rd-degree profiles in LinkedIn as a story · 2 points
HN discussionSubmitted Attacking zone page metadata in iOS 7 & OS X Mavericks as a story · 2 points
HN discussionSubmitted List of currently acttive bug bounty programs as a story · 2 points
HN discussionSubmitted Advice from a Researcher: Hunting XXE for Fun and Profit as a story · 1 points
HN discussionSubmitted Writing Up a POC as a story · 1 points
HN discussionSubmitted Show HN: crowdsourced penetration tests via bug bounties as a story · 1 points
HN discussionSubmitted Example of Covert Redirect and Early Warning bug as a story · 1 points
HN discussionSubmitted Bugsquash: Help Us Test OpenSSL and Make the Internet Safer as a story · 1 points
HN discussionSubmitted List of Heartbeat exploit proof of concepts as a story · 1 points
HN discussionSubmitted HP Zero Day Initiative’s vulnerability fix timeline now 120 days as a story · 1 points
HN discussionSubmitted How to be sweet to your security researchers as a story · 1 points
HN discussionSubmitted Github starts bug bounty program as a story · 1 points
HN discussionSubmitted The need for Responsible Disclosure policies - 16 yo hacker Joshua Rogers as a story · 1 points
HN discussionSubmitted Top Bugcrowd Charity Hackers of 2013 as a story · 1 points
HN discussionSubmitted Three ways to avoid duplicates in bug bounty programs as a story · 1 points
HN discussion