@GodfatherOrwa@Bugcrowd Okay, from what I've learned in DMs, you should message your hacker success manager @ bc and ask them why you weren't invited :)
Like, do bugrcrowd not tell these people 'hey, there's an event going on but we weren't able to make room for you: here's why these other people were selected'.
Just a strange thing to see when there's so much infrastructure, leaderboards, events etc.
Got some flak for this... All I'm saying is: If Top 5 ATP tennis player posted on socials 'wait, you guys had an event without me? why wasn't I invited?' - it would have strange optics.
@bsysop@Bugcrowd Who do we ask by the way? If someone doesn't reply to a thread like you have: Orwa obviously tagged Bugcrowd, but it's not like they'll respond to his ask ๐
@bsysop@Bugcrowd 'profile match' is obviously very prone to bias, you can hide anything under 'profile match'. Profile match could just mask personal preferences etc. So I'd like to hear more about the factors that go into it that are measurable.
@bsysop@Bugcrowd Fair enough mate, I'll ask a couple questions:
What is the number of Bugcrowd events you been invited to participate in over the past 3 years?
Do you believe that you are invited solely on the basis of the merit of your performance on Bugcrowd?
@ImposterAdam@CalebDixonSmith@DanielMiessler Do you think if there was no linguistic description of gravity and its laws, human beings wouldn't be able to observe them and 'know' that they apply?
You think you're upset at bug bounty platforms and their natural use of leverage they have and the market incentives for them to use that leverage.
You fail to realize that you're actually upset at the hacker community, who have failed to make use of the leverage they have.
@iam_wanders You can't solve mistreatment, you solve it by taking your skill elsewhere, eventually companies getting their attack surface covered by the most skill will be the most hardened and least vulnerable to other attackers with access to AI.
@iam_wanders We could still have leaderboards etc. using ledgers. Self-hosted programs could run ledgers with username and finding count/criticality etc. And you could reference these ledgers in directories of hackers etc.
If you do this over and over again, there will either be some form of collective action, led by people with the most influence, or there will be a sea of pseudo action replies from these people that will go down in the history of hacker culture as grifting.
The number one thing you as a hunter can do, assuming you're a hunter who actually has submitted decent research, is every time you see someone with 5K+ followers complaining about bb -> reply "what can we do about it?" or "what does this achieve?"
You think you're upset at bug bounty platforms and their natural use of leverage they have and the market incentives for them to use that leverage.
You fail to realize that you're actually upset at the hacker community, who have failed to make use of the leverage they have.