Jamie Slome

ex-VP @Citi | Co-founder (acquired by @PaloAltoNtwks)

[FINOS @FINOSFoundation]

🎉👏 Congratulations to Jamie Slome of @Citi for winning the Most Active Individual Award at our Open Source in Finance Forum! https://t.co/F52SDGZguK

➡️ Speak at OSFF NYC: https://t.co/FzwUEAUbnH

#opensource #fintech #OSinFinance #OSFF2024 #regtech #financialservices #finance

[Jamie Slome @JamieSlome]

Last week @KatNovakovic and I represented @Citi at @openuk_uk State of Open Con '24. Elizabeth Lumley, Deputy Editor of @TheBanker (@FT), said "I'd never heard a case study from a bank presented with such clarity and transparency before".

🎥 Watch it now:
https://t.co/oUtIjs19QA

[Jamie Slome @JamieSlome]

@jh3yy @danielcroe @puruvjdev Confetti will also appear in the Open Graph image too 🎉

Just a bit of time for the cache to update 👍

[Jamie Slome @JamieSlome]

@JGamblin A new incentive to *not* look for vulnerabilities, I guess.

[reverseame @reverseame]

use after free in skipwhite in vim/vim https://t.co/HwfYZlWeG4

[Jamie Slome @JamieSlome]

@doublevkay @huntrdev Great work @doublevkay ♥️

[Khang Vo (doublevkay) @doublevkay]

I have submitted 18 reports, 9 validated, and 4 CVEs in a month. Just small things for the beginning, but yeah, glad that I end up at the #top2 leaderboard (30 days) on @huntrdev. Appreciate the #CodeQL help!

Wish you all happy hacking!😁

[huntr @huntr_ai]

Welcoming @getoutline to https://t.co/yT0C1APRvB 🤝

With up to $2000 in rewards per vulnerability, and a super-responsive maintainer (@tommoor ♥️), this is a bug bounty programme you won't want to miss.

Report now:
https://t.co/L8KAfdTcoi

[Khang Vo (doublevkay) @doublevkay]

I have found a high severity vulnerability in @momentjs - one of the most depended-upon packages on @npmjs.

The vulnerability has been found with CodeQL, reported on @huntrdev. It is also my first #CVE, first #bugbounty, and the first GHSA credit.😄

https://t.co/c50sBmi5Ts

[Smaran Chand @smaranchand]

Earn bounties by Hacking with Rengine as well as Hacking Rengine.
https://t.co/UtHuj5g4lH

[TheMayor - Joe Helle @joehelle]

Learn about Unverified Password Changes and how you can snag quick vulnerabilities in web applications. Plus, see how you can go through the process of submitting your first bug on @huntrdev
https://t.co/0BpLVwKNMF

[Jamie Slome @JamieSlome]

@joehelle @huntrdev @FearlessSec Joe is 🔥

[db @whokilleddb]

As usual, thanks to the @huntrdev and @JamieSlome for all the help during the whole process <3

[Jamie Slome @JamieSlome]

Yes.

[huntr @huntr_ai]

Can open-source software be more secure than proprietary software? 🤔

[Ryan @GreaterGoodest]

It’d be kind of cool if someone consolidated CVEs / writeups by the language used to write the software. Like on https://t.co/GtWtmy6lVp you can search for reports on repos that use c, python, golang etc. maybe this is already a thing and I don’t know?

[Jamie Slome @JamieSlome]

@wdormann @huntrHacktivity @GreaterGoodest @huntrdev We have corrected the report to CWE-674 as requested by the researcher and updated the CVE as well 👍 Thanks for bringing this to our attention :)

[huntr @huntr_ai]

When @drawio says security-first, they mean it. Read through one of our latest write-ups for an Arbitrary Code Execution Through Sanitizer Bypass, fixed by @davidjgraph:

https://t.co/VuIZSD8P1E

[_rs @rs_loves_bugs]

Very cool write-up on a prototype pollution bug @yu5k3 found and exploited to achieve remote code execution

https://t.co/MdqvwAtGKm

[Jamie Slome @JamieSlome]

Ooo 🤩

[huntr @huntr_ai]

+50 FOSS projects have been added to our bug bounty program:

✅ Rewards up to a mega-$1200
✅ Rewards for maintainers (always)
✅ Expanding our pledge for a sustainable open source ecosystem

New projects include @junitteam @Google @kotlin @EclipseFdn @TheASF + more...

[FacturaScripts @facturascripts]

FacturaScripts 2022.06 disponible con correcciones y mejoras en la seguridad, gracias a https://t.co/8z1G1qy59w

https://t.co/OtfgEXlroN