3 ms·

Curious question, if you find a few vulnerabilities like this, does it mean that you could get hired by Google to do this internally? What I'm trying to ask is

Curious question, if you find a few vulnerabilities like this, does it mean that you could get hired by Google to do this internally? What I'm trying to ask is: does this make the hiring process easier?

wolco2 6y ago
No and if it came up it would work against you. It means you are working for basically free for Google at least you can put it on your resume although that might work against you.
googlesecthrow 6y ago
It definitely can help. In my experience, finding these kinds of bugs can help you get the interview, but it doesn't necessarily help that much once you get to the interview since the interview process is still standardized and focuses on evaluating you across a number of different areas (not just vulnerability research). But it definitely helps get some good attention! Disclosure: I work at Google on their security team and reported a number of bugs to their VRP before I got hired.
rasz 6y ago
Sure, you could get hired like anybody else after passing week long string of whiteboard exams. Start dropping zero days on twitter if you really want to get hired: https://nakedsecurity.sophos.com/2019/06/13/microsofts-battle-with-sandboxescaper-zero-days-turns-into-grim-groundhog-day/ https://nakedsecurity.sophos.com/2019/06/13/microsofts-battl... wah wah bad person publishing zero days wah wah Irresponsible disclosure hurts everyone. wah wah reality: https://krebsonsecurity.com/2020/04/microsoft-patch-tuesday-april-2020-edition/ https://krebsonsecurity.com/2020/04/microsoft-patch-tuesday-... got hired @Microsoft, started fixing other bugs they didnt know they had
Sirened 6y ago
I've gotten hired because of vulnerability reports. It helped skip a lot of the "convince me that you know what you're doing" phase of interviews and it was then mostly just social/team fit!

3 ms·

Curious question, if you find a few vulnerabilities like this, does it mean that you could get hired by Google to do this internally? What I'm trying to ask is

by mettamage 6y ago

wolco2 6y ago
No and if it came up it would work against you. It means you are working for basically free for Google at least you can put it on your resume although that might work against you.
googlesecthrow 6y ago
It definitely can help. In my experience, finding these kinds of bugs can help you get the interview, but it doesn't necessarily help that much once you get to the interview since the interview process is still standardized and focuses on evaluating you across a number of different areas (not just vulnerability research). But it definitely helps get some good attention! Disclosure: I work at Google on their security team and reported a number of bugs to their VRP before I got hired.
rasz 6y ago
Sure, you could get hired like anybody else after passing week long string of whiteboard exams. Start dropping zero days on twitter if you really want to get hired: https://nakedsecurity.sophos.com/2019/06/13/microsofts-battle-with-sandboxescaper-zero-days-turns-into-grim-groundhog-day/ https://nakedsecurity.sophos.com/2019/06/13/microsofts-battl... wah wah bad person publishing zero days wah wah Irresponsible disclosure hurts everyone. wah wah reality: https://krebsonsecurity.com/2020/04/microsoft-patch-tuesday-april-2020-edition/ https://krebsonsecurity.com/2020/04/microsoft-patch-tuesday-... got hired @Microsoft, started fixing other bugs they didnt know they had
Sirened 6y ago
I've gotten hired because of vulnerability reports. It helped skip a lot of the "convince me that you know what you're doing" phase of interviews and it was then mostly just social/team fit!