¯\_(ツ)_/¯ bug bounty, hacker or some other thing, who knows anymore ¯\_(ツ)_/¯

Joined September 2014
426 Photos and videos
Replying to @codecancare
@codecancare I saw you were on the top of the leader boards on Etsy's program but looking at the rep points it doesn't look like too many people work on Etsy's program which seems odd but maybe tells me it's extremely hardened or overwhelming. Do you have any insight to share?
1
108
I'm just trying to find a new program to hack on that could be interesting and fun with a lot of scope or a lot of features that are testable or complex rbac permissions.
101
This is dope!!! Hey yeah @renn
199
Replying to @hacker_
@hacker_ have you written anything about the process you've had to go through with sourcing, sampling, testing, and producing a product? I love the @boringmattress idea & how you were able to tap into that market. I would love to hear about that process.
1
99
I've wanted to find a more affordable way of making cycling jerseys, bibs, and other cycling clothes for the Dad that doesn't want to drop $300-$500 on a single cycling kit made from inexpensive Lycra/Spandex and an anti-microbial butt pad (a bit reductive but you get it).
1
71
Inexpensive material with insane markups, seems like an industry very similar to the mattress industry.
47
Pretty fucking rich coming from Apartheid Elmo... These fuckers trying to whitewash slavery. What a sad clown of a man.
Cried about advertisers leaving yesterday then turned around and pinned the most racist shit imaginable
1
1
259
Loving Ray's proud and passionate parenting! @RayRedacted you've raised an impressive young man! We might need to start calling him Sam 'The Flash' Watson! So glad you proudly shared your son's accomplishments, if not I NEVER would've seen this impressive skill& agility! 👏👏
This young man will climb on the Paris Olympics in exactly one hour from now. Blink and you will miss the whole thing.
152
"That's just how it is. If this repeated, unrelenting banging of your head against a wall..." @Rhynorater dude! Quit spying on me! I didn't give you permission to use my likeness 🤣🤣🤣 #foundmypeople 1 on the use of "metric shit-ton" #definitelyfoundmypeople
1
3
550
Colin Rubbert retweeted
10 Jul 2024
Hey @Shopify @Hacker0x01 ... I have had two bug hunters come to me and tell me horror stories about your bug bounty lately. Valid bugs being exploited and you coming out saying... "oh we had planned on fixing that... no impact" That is NOT the bug bounty contract. If there is a PoC showing the bug was exploitable at ANY time, you should pay the researcher. Don't contribute to a bug bounty community that makes researchers think bug bounty is a scam. Also - dont hide behind the new CVSS. Program owners looking to downgrade bugs to save money using the new CVSS and splitting bugs are SUPER scummy. Contact @G0LDEN_infosec
69
117
768
143,445
We see you @WeAreSinclair @komonews we see you! We see what you're doing. Turncoats & traitors the lot of ya. If ANY of y'all were REAL journalists, you'd report on this, to hell w/your salary! Integrity of more important.
17 Jun 2024
1. @WeAreSinclair is flooding a vast network of local news websites with misleading articles suggesting Biden is mentally unfit At least 3 articles published this month falsely suggest BIDEN POOPED HIMSELF during an event The thinly disguised political attacks are given the imprimatur of mainstream media brands, including NBC, ABC, & CBS 🧵
123
I'm really quite shocked at the good will that Microsoft has earned and are now squandering. This is OLD Microsoft bullshit, Satya should know better than this!
99
Generate numbers 💕💕 The struggle is real! 🙏
4 Jun 2024
EvenBetter v2.42, EvenBetter: Extensions v2.0 are out! github.com/bebiksior/EvenBet… github.com/bebiksior/EvenBet… To upgrade from v2.31, go to the Settings tab on the Extensions page and click "Update now". The migration script should do everything for you :D Changelog v2.4 - Moved to the new Caido plugin system! 🎉 - Response preview: you can now preview the response in your browser by clicking the eye icon next to the preview HTML and navigating to the copied URL - Collections share: you can now export and import collections on the Replay page - Match & Replace rules share: you can now export and import Match & Replace rules on the Match & Replace page - OpenAI gpt-4o instead of Caido Assistant: you can now use OpenAI GPT-4o instead of Caido Assistant, you have to provide your API key in the EvenBetter settings - Generate numbers: you can now generate numbers on the Automate page in the "Simple List" type - [BETA] private interactsh instances: you can now use private interactsh instances on the Quick SSRF page Changelog v2.41 - Fixed reordering of the sidebar pages and removed unnecessary setTimeout which should prevent flickering on startup Changelog v2.42 - Merged PR by @Rhynorater that fixes bug in Match & Replace and adds default match -> name functionality
155
Colin Rubbert retweeted
the amount of LGBT hate ive seen from the bug bounty community on twitter today is astounding. y’all need to take a good look in the mirror and treat others how you want to be treated. absolutely disgusting. 🏳️‍🌈
7
3
67
10,142
Oh snap! I might have to just have @caido running 24/7 w/a match and replace rule for all google searches 🤣
157
Idk, GPT 4o feels so AF to me. I'm having it help me fill out an application. I've provided it a bunch of data, it should really be a non-issue. First it was lazy and pretty much just repeated a quote in my prompt as the answer. Then I have it do the work and it is CRAWLING!
122
Finally, hunters - Hunters globally, new and seasoned, get new revenue streams, new opportunities, and an increased seat at the table and respecting the massive effort we put in to have secure these companies and their users. @0xteknogeek @Rhynorater @nagli
Latest episode of the pod just dropped! This week we deep-dived the VDP debate that has been happening on twitter (ala @galnagli) and ended up rekindling that hacker vs program manager debate. It's a spicy one! ctbb.show/67
1
5
1,192
- VDP's have to be accountable but have a great winfall with a cyclical flywheel effect - Platforms get more companies by reducing the barrier to entry by giving new/current companies an additional tax benefit in writing off rewards as marketing promotions/swag donations 3/4
1
98
Finally, hunters - Hunters globally, new and seasoned, get new revenue streams, new opportunities, and an increased seat at the table and respecting the massive effort we put in to have secure these companies and their users. @0xteknogeek @Rhynorater @galnagli
1
88
Gathering information to try and guestimate what yearly operation costs would be to figure out if it's feasible. Tagging for reach & I value y'all's opinions: @UK_Daniel_Card @Rhynorater @Jhaddix @AlyssaM_InfoSec @HackingDave @jayesh25 @0xTib3rius @rez0__ @SwiftOnSecurity
How much would you need to make to quit your job and work 100% in a non-profit capacity to hunt, hack, pentest, defend: schools, hospitals, local municipalities, critical infra, etc. You work solo, at your own pace but turn out results. You only report & advise, not maintain.
2
406
How much would you need to make to quit your job and work 100% in a non-profit capacity to hunt, hack, pentest, defend: schools, hospitals, local municipalities, critical infra, etc. You work solo, at your own pace but turn out results. You only report & advise, not maintain.
28% 100k
35% 250k
10% 500k
27% 1m
457 votes • Final results
9
3
11
6,531