Thursday, August 10
Happy Thursday - make it a great day!
TOP STORY
A Uruguayan high school student found a $10,000 bug in Google. “I thought to myself, ‘Cool, this is probably a small thing that isn't worth a dime, the website probably had some technical stuff about Google servers and nothing really important’. On that note - hacking the Air Force while still in high school? Yeah, that happened.
HACKTIVITY
ap_find_token() Buffer Overread [5 upvotes] - $1,500 bounty for this report to Apache httpd by @javier_sensepost. “I would like to donate the bug bounty money (if any) to charity and preferably do it on behalf of my company, SensePost”. Well done, Javier.
You can see all the latest and greatest disclosures and bounties on www.hackerone.com/hacktivity
OTHER ARTICLES WE’RE READING
A new era of SSRF [slides from Orange Black Hat / DEF CON talk]
Alleged vDOS Operators Arrested, Charged Krebs on Security
ABOUT ZERO DAILY
Zero Daily is a daily newsletter that highlights application security, bug bounty, and hacker focused topics. The content is curated with love by @luketucker and brought to you by HackerOne.
Friends don’t keep good things to themselves - forward this to your homies and co-workers. BTW, want to see who runs bug bounties?
Have a news tip / story to highlight? We’d love to hear about it. Email: zerodaily@hackerone.com
Get this email forwarded to you? Click here to subscribe to the Zero Daily
Machines already hate me
HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited. As the contemporary alternative to traditional penetration testing, our bug bounty program solutions encompass vulnerability assessment, crowdsourced testing and responsible disclosure management. Discover more about our security testing solutions or Contact Us today.