~/talk

Another year of HackerOne statistics

on YouTube 04m
Talkat Nextcloud Conference 2018 · 2018-08-23..08-30· [security]

speaker

name:Roeland Douma
links:none on file

resources

video:https://youtu.be/EeCWgit8TSc
slides:none on file

summary

Over the last 12 months hackerone project shows 167 closed reports but only 36 are valid bugs, 16 qualify for bounties, total payouts about $2,300 with median $100 and average $142. Example: a file access control bug allows unauthorized previews, is reported May 28, is reproduced May 29, a patch is ready the next day, is verified and paid in early June, release fixes two weeks later and is disclosed. Program yields actionable reports and fast triage and patching.

AI-written summary · about

chapters (6)

  1. 0:00What is HackerOne
  2. 0:21Main purpose of HackerOne
  3. 1:20Bounty
  4. 1:57Security issues
  5. 2:35Perc report
  6. 3:35Conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.