mongo

I like bug bounty programs and breaking things that other people have built. I love kudos.

[Justin Kennedy @jstnkndy]

@mongobug is the greatest

[mongo @mongobug]

@justdionysus Solved it (a friend sent it to me) and it was pretty fun and different :) ty

[mongo @mongobug]

@Masonhck3571 I will wait until 7am next time.. but still, any updates?

[mongo @mongobug]

@zseano @alxbrsn @CaidoIO 1.7 is the real Burp, feels like home

[mongo @mongobug]

@harshbothra_ @jstnkndy

[mongo @mongobug]

@jobertabma @Hacker0x01 @jstnkndy

[mongo @mongobug]

@PrincessYadhavi @jobertabma @Hacker0x01 You're right but I can't edit :D it should read, 10 crits and 5 lows should not rank lower than just 10 crits

[mongo @mongobug]

Apparently people are now holding on to low-medium-high bugs and submitting only crits because otherwise they get less invites on BB platforms? (heard this about H1, but probably true for others). Algorithmic failure if so

[mongo @mongobug]

@Hogarth45_ Well, the algo is wrong then. 10 crits and 1 xss is not worse than 10 crits. That was my point :) appreciate the extra insight

[mongo @mongobug]

@Blaklis_ @njcve_ As the french ambassador can't you get him a french passport?

[mongo @mongobug]

@Hogarth45_ Agreed, but I'm now hearing of people sitting on RXSS / SXSS / etc too. Admittedly I heard from a small percentage of hunters, but that doesn't seem like a net win for overall security

[mongo @mongobug]

@Hogarth45_ If true, then I wonder how many vulns are going unreported by people who are not willing to get 2 accounts (which is against the rules iirc)

[mongo @mongobug]

@MrTuxracer @plmaltais @Hacker0x01 @Bugcrowd Unfortunately CVSS is hardly objective either, though. And it gets worse because half the bug bounty people and security teams do not fully understand the ratings for each field. Usually becomes a tug-of-war

[mongo @mongobug]

@maxrousseau Elon bad rocket man

[mongo @mongobug]

@DRUNKKZ3 Any plan to make TDM a permanent mode in 2042? I feel like you're going to remove it in season 4, that would drive a lot of people off

[mongo @mongobug]

@MrTuxracer Top clown.. imagine dealing with this guy as a bug bounty triager or program owner...

[mongo @mongobug]

@cstross @elonmusk Much like this tweet :')

[Erin Jacobs @SecBarbie]

I’ve loved watching how the @elonmusk @Twitter thing has impacted #InfoSec — meaning — people who do nothing but tweet all day and are defined by their egos and twitter identity have been freaking the fuck out — people who actually do the work really don’t care. Thoughts?

[mongo @mongobug]

Can't wait for all the crybabies to finally "go to Mastodon" so my feed can stop being all about Elon and Twitter. If you're leaving, close your account and stop tweeting