addams

3 ms·

1. 1.▲
   Trust Wallet Browser Extension v2.68 Incident: An Update to Our Community(trustwallet.com)

   3 points by addams 10mo ago|0 comments
2. 2.▲
   by addams 10mo ago

   More or less confirmed: https://trustwallet.com/blog/announcements/trust-wallet-brow...
3. 3.▲
   by addams 10mo ago

   One of CZ's tweets hints at an insider threat, but Trust Wallet was one of the GitHub organizations pwned by Sha1 Hulud. What are the odds this is a fallout of that?
4. 4.▲
   by addams 1y ago

   I think they just don't care. Their SECURITY.md mentions bug bounties, yet if your submission has anything to do with GitHub it's immediately disqualified. They refuse to remove that (in my opinion) misleading language. https:&#x
5. 5.▲
   by addams 1y ago

   Microsoft's bug bounty program is a shell of its former self. They quietly disqualified a lot of high-impact findings in 2023. In my own experience: - Leaked service principal credentials granting access to their tenant? $0 bounty. - L
6. 6.▲
   Regex is almost all you need(lookingatcomputer.substack.com)

   13 points by addams 2y ago|0 comments
7. 7.▲
   by addams 2y ago

   > ... I have almost zero motivation for responsible disclosure schemes anymore. It's a bunch of paperwork only to be told it's "expected behaviour" or "not a bug", or at best receive a measly reward that bar