Michael Skelton

VP of Operations @bugcrowd, Hacking Content @ tools @ @SecTalks_GC & @BSidesGC co-organiser

[Michael Skelton @codingo_]

3 events, 3 days, over $3m paid and a new bug bash industry record. If you’re not hacking on @Bugcrowd you’re missing out on the best events the industry has to offer.

Love our crowd. You are all so incredible.

[Dave Gerry @davegerryjr]

Well, it’s been an interesting 24 hours to watch this play out and there’s been a lot of conversation about using submission data for training. I want to be very clear on Bugcrowd’s position.

Hackers are and continue to be the heart of @Bugcrowd. We are a part of the community and value the work the researcher community does to help customers identify vulnerabilities.

AI is here to stay and will play a large role in cybersecurity going forward. However, that doesn’t change our commitment to the hacker community.

We’ve been exploring ways to bring hackers along for the journey - not replace them with AI - and have been working in conjunction with members of the community, our own team & our Hacker Advisory Board to figure out the right way to incentivize and monetize AI-driven products for the hackers contributing.

We won’t get everything right, but you have our commitment to be transparent as we strive to get this right and chart a path towards a human+AI future.

[Michael Skelton @codingo_]

@hakluke @ZumKato feels..

[Thomas Roccia 🤘 @fr0gger_]

Unprompted Australia CFP is open! Send your best research 👇👇👇

[sw33tLie @sw33tLie]

I wanted a screenshot tool for macOS better than anything out there, so I built one with @claudeai

Native Swift. No Electron.

Annotate, record screen, scroll capture, auto-redact PII, beautify, upload to Drive & more — one flow.

Free & open source forever.

macshot 🔗👇

[Michael Skelton @codingo_]

@hakluke Agree... though margins are so thin for farmers, and most people don't like to pay what it costs a larger grower to allow them to sell with the losses they incur without herbicide, unfortunately

[Michael Skelton @codingo_]

@hakluke Depending how particular you are with chemicals, also be sure to ask properties if they participate in the Woolworths/Coles scrap system. They provide free vegetables by the trailer load for properties to compost/use, but does mean there's going to be trace chemicals that way

[Michael Skelton @codingo_]

@hakluke If you want to grow yourself, you can source more natural fertilizer via horse properties using the same method. Chickens also work well, provided you compost coop straw to give it time to rest before using it. You can also trade the eggs for vegetables easily.

[Michael Skelton @codingo_]

@bev_ben @hakluke Nice as the idea is, in execution it’s very hard to get enough diversity and calories off the land to fully sustain without outside sources

[JS0N Haddix @Jhaddix]

How do you get into cyber?

Need to bridge the gap from no experience to jr?

Today we are releasing three modules for FREE from our course “Hacking Your Career”!

These modules cover my favorite training resources across every domain: Blue, Purple, and Red additionally organized by cost tier: free, cheap, and expensive.

Each recommendation made the cut because it actually builds skill, and most include certifications you can add to your resume!

https://t.co/hMzciodVVV

[Michael Skelton @codingo_]

@PhilippeDelteil @Bugcrowd There’s a process called aged submissions that should re-surface these to the customer on a regular basis. It doesn’t look like it trig'd here (since priv comments aren’t showing on the timeline). I’ve raised it to confirm why and to see if we can get this addressed for you now

[Michael Skelton @codingo_]

@TheContractorio @Bugcrowd @SAP Not quite following all the specifics here, but if you can send me a sub id ill dig I’ll have someone take another look at this later today for you

[Michael Skelton @codingo_]

@public___void I've passed this to the rep for this customer now, they will reach out on your behalf

[Michael Skelton @codingo_]

@Matshi_M @Mr_white_arts @nischalxdp @Bugcrowd @Hacker0x01 No, not at all! Was completely unrelated

[Michael Skelton @codingo_]

@Mr_white_arts @Hacker0x01 I recommend going back to `9a25e17c-7e8a-40b8-afe6-7d59ceca4324` from three years ago, the two issues are the same and I explained it in more detail to you there.. That same lesson applies also on this newer submission

[Michael Skelton @codingo_]

@Mr_white_arts @Hacker0x01 A good takeaway for your reporting is to always try to answer the question "as a hacker I could", in this case, you can demonstrate a cname is present, but not host content, or impact users or the customer negatively. If you believe otherwise, host an md5 of your username