US government warning! What if anyone could open your garage door?
Grab a message/Play it back/You’ve just performed/A big phat hack… Continue reading US government warning! What if anyone could open your garage door?
Category Archives: responsible disclosure
IoT devices must “protect consumers from cyberharm”, says UK government
“Must be at least THIS tall to go on ride” seems to be the starting point. Too little, too late? Or better than nothing? Continue reading IoT devices must “protect consumers from cyberharm”, says UK government
Told your organisation is leaking data? Here’s how not to respond
Platform engineer and open source enthusiast Rob Dyke says that he’s found himself in a sticky pickle.
You see, in late February he discovered two public repositories on Github which contained code for an application, API keys, usernames nad passwor… Continue reading Told your organisation is leaking data? Here’s how not to respond
Naked Security Live – When is a bug bounty not a bug bounty?
Latest episode – watch now! Continue reading Naked Security Live – When is a bug bounty not a bug bounty?
No password required! “Sign in with Apple” account takeover flaw patched
A bug bounty hunter found a way to login using “Sign in with Apple”… but without the part where you have to put in a password. Continue reading No password required! “Sign in with Apple” account takeover flaw patched
Let’s make ransomware MORE illegal, says Maryland
… with a clumsily worded proposed bill that wouldn’t protect researchers. Continue reading Let’s make ransomware MORE illegal, says Maryland
Google’s Project Zero highlights patch quality with policy tweak
Google’s Project Zero bug-hunting team has tweaked its 90-day responsible disclosure policy to help improve the quality and adoption of vendor patches. Continue reading Google’s Project Zero highlights patch quality with policy tweak
HackerOne pays $20,000 bounty after breach of own systems
In an embarrassing twist, bug bounty platform HackerOne has paid a $20,000 reward to a researcher who reported a security flaw inadvertently caused by one of its staff during… a bug submission. Continue reading HackerOne pays $20,000 bounty after breach of own systems
Uncle Sam opens arms to friendly hackers
All you bug hunters out there are about to get a nice Christmas gift – the US federal government finally wants to hear from you. Continue reading Uncle Sam opens arms to friendly hackers
TOMS hacker tells people to log off and enjoy a screenless day
TOMS seems like a really nice shoe company, and it just got hacked in a really nice way. But it’s still a hack. Continue reading TOMS hacker tells people to log off and enjoy a screenless day