norsey

High-Tech Low-Life, Hacker, Red Teamer, Viking.

[norsey @norsec0de]

@s3ctur

[Arena Breakout Infinite @ArenaBreakoutPC]

To celebrate, we are giving away 100 beta keys to our beloved players.
Here's how to catch one:
1️⃣Like
2⃣Follow us
3⃣Retweet and tag a friend

Event Ends
MAY 16

Thank you everyone for your support and feedback along the way.🖤
#ArenaBreakoutInfinite

[Michael Skelton @codingo_]

Today @bugcrowd, we're expanding our product line to offer VDP's for free https://t.co/OiD82DnXuP, marking the next evolution of our VDP product, following our removal of incentives some time back.

This marks a change in the industry, providing a no cost entry point for customers to build up reporting portals, to support hackers in bringing vulnerabilities to them, in a fast, and effective manner. It also allows customers to build exposure to the value of the hacking community, and then pursue other offerings in the managed bug bounty space, or pen testing space, in a paid model, that incentivises findings and discovery, whilst VDP is intended to capture existing known findings.

Also, hackers, we hear you, we love you and we know there's more to change around VDP's. This isn't our only change. We're aware of the need to change terms for them, and it's currently an active discussion, as well as better separating VDP from MBB which we've done by removing incentives, and having this offering not list in our program portals. If you've other feedback, we would love to hear it, and welcome it - my slack is always open and you can reach me on HIVE, Bug Bounty Forum, or here over DM

[norsey @norsec0de]

Big congrats to one of the most promising up and coming hackers around! @NinadMishra5 just published an excellent intro to game hacking on the @Bugcrowd channel. Check it out and give him a 👍 #BabyRockstar https://t.co/uVrSsvGovF

[Michael Skelton @codingo_]

One of the challenges that comes up in support @Bugcrowd: briefs changing while submissions are pending, which caused scope misunderstandings.

Going forward, hackers, customers, and triagers will have access to the original brief at the time of submission. Additionally, we're preserving customer notes during triage to improve accuracy.

A big thank you to @bishal0x01, @CharlieEriksen, @imhaxormad who brought this to our attention! 🙏

[Hbomberguy @Hbomberguy]

https://t.co/bUIT6ADOl6

[cje @caseyjohnellis]

#ff @evildaemond @arcwhite @vortexau @norsec0de @amalmurali47 @th3cyb3rk1tt3n @mikepatx @painxploiter @dooktwit @codingo_ @mazeheld @davegerryjr @paytoneal @Jhaddix @Bugcrowd @JonnySchnittger @dcuthbert @singe @dakacki @vortexau @halvarflake @wbm312 @carfucar @snyff

[norsey @norsec0de]

@drunkrhin0 Confucius once said: "he who does not take Slack to the lavatory shall lose invites to drunk rhinos"

[cje @caseyjohnellis]

oh c’mon now that shit is just lazy

[norsey @norsec0de]

Anyone else remember when telcos used to leave a thick book on your doorstep every year with everyone's name, address and phone number in it? #OptusDataBreach

[cje @caseyjohnellis]

yo #brazil security folks! wanna come work with
@codingo_ @vortexau and the @Bugcrowd team? https://t.co/BoVfCifBA5 #hiring #bugbountytips #bugbountyjobs

[Dan Hollick @DanHollick]

Ever wondered how a QR code works?
No, me neither but it's low-key fascinating.

(Warning, there is some extremely nerdy shit here.👇 )

[norsey @norsec0de]

@Steelemanbankai @FrankyBro I managed to scan it, took me here: https://t.co/nKnbOLwz3a

[Thomas H. Ptacek @tqbf]

Welp. It’s the crypto bug of the year. Mark it down for April. Java 15-18 ECDSA doesn’t sanity check that the random x coordinate and signature proof are nonzero; a (0,0) signature validates any message. Breaks JWT, SAML, &c. https://t.co/t2WgnS0g3A

[Wes Kao 🏛 @wes_kao]

Most people suck at managing up.

They waste their boss’ time with too much (or too little) information.

Here’s how to give the right amount of context:

[Farah Hawa @Farah_Hawaa]

New VLOG!! 🎥

This is my first-ever vlog where I ended up touring the @Bugcrowd office & also met @caseyjohnellis

https://t.co/fRQIBdZKyl

[norsey @norsec0de]

@aymanshargawi1 @SecurityTube This was at BSides Las Vegas in 2014. 11/10 Highly recommend the BSides conferences, check them out @BSidesLV

[norsey @norsec0de]

"you know when you study something and it tickles your autism?" ~ @kymb0_irl © 2021

[norsey @norsec0de]

@DuduzaneZuma_ Did this idiot just label his father as "too big to fail"?

[norsey @norsec0de]

@kymb0_irl The only thing Windows should be used for is running shellcode

[norsey @norsec0de]

@osiryszzz @kymb0_irl long time mate

[norsey @norsec0de]

everyone, meet @kymb0_irl, a talented young lad who pwns all the things, despite growing up in NT.