9 ms·
A fair number of people wind up in executive security roles with no technical background to speak of. That said, for every legitimate security researcher, ther
by Kalium 8y ago
A fair number of people wind up in executive security roles with no technical background to speak of.
That said, for every legitimate security researcher, there are dozens of people who are blowhards. Bug bounty programs, for example, are stuffed full of "[CRITICAL][ACCOUNT TAKEOVER] EMERGENCY VULNERABILITY"... which is actually some skiddie reporting someone being able to XSS themselves.
On the outside, you mostly just see the ones that go bad. On the inside, any given report is unlikely to be nearly as severe as it's claimed to be.
- duxup 8y agoOh I hear ya. The lack of knowledge extends to the "researchers" for sure. The unfortunate thing about the Panara Bread deal was any dude could have just pulled up Postman and hit the API and seen the results / issue in a couple seconds + however long it takes Postman to start on their computer. They didn't even try, they could have rule out "crazy researcher" in seconds.