タグ

ブックマーク / blog.teddykatz.com (1)

  • Bypassing GitHub’s OAuth flow

    For the past few years, security research has been something I’ve done in my spare time. I know there are people that make a living off of bug bounty programs, but I’ve personally just spent a few hours here and there whenever I feel like it. That said, I’ve always wanted to figure out whether I’d be able to make a living on bug bounties if I chose to work on them full time. So I tried doing that

    masa_iwasaki
    masa_iwasaki 2019/11/08
    このバグレポートで270万円くらいもらったってことか。“I also got a $25000 bounty (!), which at the time was the highest bounty ever from GitHub’s program.”
  • 1