Hidden Chains: Revealing High-Impact Bugs from Bounty submissions
summary
Curated bounty reports show concrete wins not promises: a compromised S3-hosted binary in FS events S3 takeover executes on macOS and prompts a reserved-bucket mitigation plus dependency scanning and endpoint checks; a crafted Snapchat URI exposes conversation IDs and triggers calls in Android deep-link video call leading to a user-dialog mitigation and a new privacy bug bar; and a reflected payload stored to BigQuery turns into notebook JavaScript that reaches the IPython kernel in Jupyter XSS→kernel RCE, prompting notebook hardening, patching, and hosted-kernel use. Payouts scale to $35k and program payments exceed $1M.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 4:53Bug bounty overview
- 12:59FS events vulnerability
- 17:44Android deep link abuse
- 22:44Blind XXS in Jupyter
- 31:21Launching bounty program
- 39:21Gamifying bounty program
- 41:50Q&A
related talks
30mBeyond Quick Cash: Rethinking Bug Bounties for...
53mOpening Keynote – Dr. Katie Paxton-Fear
45mInoculating Rails Auth Against Bug Bounty Hunters
23mIntroduction to security research and bounty hunting on Apple's platforms
45m2014.10.29 - Security@Scale - Katie Moussoris, HackerOne
43mHow The Hack?
35mBug Bounty Hunting
26mLife of a Bug (an insight on the GitHub bounty...