martenmickos

4 ms·

1. 1.▲
   by martenmickos 9y ago

   Here is the announcement by Google: https://security.googleblog.com/2017/10/introducing-google-p...
2. 2.▲
   by martenmickos 9y ago

   Thanks for raising this issue. HackerOne will NEVER threaten you or do anything to reduce your security. You can safely ignore our sales emails if that's what you want to do. We are just trying to be helpful. But we do have the absolut
3. 3.▲
   by martenmickos 9y ago

   Sign up here: https://www.hackerone.com/resources/hack-learn-earn
4. 4.▲
   by martenmickos 9y ago

   Generally in the world of bug bounty programs, the signal-to-noise ratio (SNR) is around 10-20%. Even at this low rate, it is not too bad. Let's say you receive 10 reports. You can relatively quickly identify the 8-9 noisy reports to f
5. 5.▲
   by martenmickos 9y ago

   Here is a great interview with MalwareTech: http://abcnews.go.com/Technology/wireStory/computer-expert-f...
6. 6.▲
   by martenmickos 9y ago

   Here is their bug bounty page for anyone who has found a vulnerability to report: https://hackerone.com/wordpress
7. 7.▲
   by martenmickos 9y ago

   Thanks tetrep. I agree with your statement "would be a good time for HackerOne to write this stuff down". We just discussed it this morning internally. If you have suggestions on how to formulate such a policy, please email me at
8. 8.▲
   by martenmickos 10y ago

   Sorry to hear this. Can you email us at support@hackerone.com or me marten@ so we can see what went wrong and where we dropped the ball. Thanks!
9. 9.▲
   by martenmickos 10y ago

   Good overview of HackerOne in The Verge: http://www.theverge.com/2017/2/8/14534738/hackerone-bounty-4...
10. 10.▲
    by martenmickos 10y ago

    The safest and most convenient way of hiring a white hat hacker (a.k.a. ethical hacker) is to run a bug bounty program and get the input of many of them. HackerOne is the leading bug bounty platform.
11. 11.▲
    by martenmickos 13y ago

    Yup. And you can add Open Nebula to the list. BTW, given that NIST uses Eucalyptus, you could argue that Eucalyptus meets not just the formal definition of cloud computing, but also the practical one.