))
A "by Hackers for Hackers" podcast focused on technical content ranging from bug bounty tips, to write-up explanations, to the latest hacking techniques.
…
continue reading
A Podcast about bugs, bounties and its researchers. Hosted by Fisher.
…
continue reading
The Cyber Riddler is a podcast that discusses interesting topics in the field of information security. It explores different areas and situations in real-life cyber security engagements and activities. Episodes feature guests from different backgrounds such as hackers, security analysts, cyber security managers, bug bounty hobbyists and more.
…
continue reading
We’re planting the seeds of fun with the only gardening podcast that’s just for kids! Welcome to Gro-Town where we celebrate the world outside our windows! Join Miss Danielle for growing tips, music, special guests, and a bounty of laughs along the way. Music. Garden. Community. Gro-Town! Continue the fun at https://www.gro-town.com/
…
continue reading
Behind The Bounty gives you an inside look at the community and people that make bug bounties happen. Hosted by Ben Sadeghipour (NahamSec) and Nathanial Lattimer (d0nut).
…
continue reading
A weekly podcast for bounty hunters, exploit developers or anyone interesting in the details of the latest disclosed vulnerabilities and exploits.
…
continue reading
An RPG actual play podcast with various systems and various story lengths, from one-shots to campaigns.
…
continue reading
The ISACA Podcast gives you insight into the latest regulations, trends and threats experienced by information systems auditors and governance and security professionals. Whether you are beginning your career or have decades of experience, the ISACA Podcast can help you be better equipped to address industry challenges and embrace opportunities.
…
continue reading
The Security Table is four cybersecurity industry veterans from diverse backgrounds discussing how to build secure software and all the issues that arise!
…
continue reading
Welcome to "Crying Out Cloud," the monthly podcast that keeps you up to date with the latest cloud security news. Hosted by experts Eden Naftali and Amitai Cohen, each episode provides in-depth coverage of the most important vulnerabilities and incidents from the previous month. Tune in for insightful analysis and expert recommendations to help you safeguard your cloud infrastructure.
…
continue reading
Hack for Fun and Profit is a weekly podcast for anyone who is interested in ethical hacking. The topics include bug bounty hunting, penetration testing, red teaming and many more. Sit back and enjoy stories, tips and tricks that will inspire you. For subscription-only episodes, enroll using this link: https://anchor.fm/thehackerish/subscribe
…
continue reading
Join CovertSwarm and special guests, as they discuss the latest Cyber Security news, trends, 0-day exploits and research. www.covertswarm.com
…
continue reading
Welcome to eCommerceAholic, where we help you get more from your eCommerce store.
…
continue reading
A podcast about the makers and breakers shaping cybersecurity. New episodes every other Monday! Go to https://hackerculture.fm for more information!
…
continue reading
Every second week, Hacker Talk brings you interesting conversation between some of the world best hackers, cyber security professionals and information security people.
…
continue reading
The Business Security (BizSec) Podcast. Hosts Beau Woods and Dave Kennedy analyze and discuss the latest business news in the information and technology security world, as well as a bigger picture theme each episode. Follow us @bizsecpodcast
…
continue reading
Welcome to ”What the Shell?” where I dive into major hacks and vulnerabilities in a way meant to be accessible by anyone. Come with me as we look at each incident through an exciting lens of curiosity. Join us on our discord if you‘d like to participate in discussions with myself and our guests! https://discord.gg/mBPbWcVRYR
…
continue reading
STEM brother Basir Vincent podcast sharing small connect with the Tech bytes to encourage thought about STEM and STEAM engagement. Cover art photo provided by Oliver Pecker on Unsplash: https://unsplash.com/@ollipexxer
…
continue reading
Beyond the Horizen is a podcast all about the Horizen ecosystem, web3 movement and the latest blockchain and cryptocurrency topics. Each month we will cover a different topic recommended by our community and invite team members and industry leaders to discuss it. Website: http://www.horizen.io
…
continue reading
Join us as we watch and discuss the entire Star Wars Canon from The Phantom Menace to the Force Awakens and beyond! Co-hosts Mondo, Joe (both from Not the Show) and with Ty (from Geek Fight Club's Chaos Inc.) talk about what they love and hate about The Saga.
…
continue reading
An insanely enjoyable Bitcoin podcast with a strong focus on liberty. Every Thursday, we chat about how Bitcoin sets the world free and share the latest cryptocurrency news and general Bitcoin talk. Guests have included: - Mastering Bitcoin author Andreas Antonopoulos - Liberty.me CLO Jeffrey Tucker - Antiwar.com editor Angela Keaton - Bitcoin/liberty activist Michele Seven - Jason King from Sean's Outpost Homeless Outreach - Drew Phillips from Bitcoin Not Bombs - Numerous other Bitcoin-lovi ...
…
continue reading
1
Episode 68: 0-days & HTMX-SS with Mathias
1:03:53
1:03:53
Play later
Play later
Lists
Like
Liked
1:03:53
Episode 68: In this episode of Critical Thinking - Bug Bounty Podcast Mathias is back with some fresh HTMX research, including CSP bypass using HTMX triggers, converting client-side response header injection to XSS, bypassing HTMX disable, and the challenges of using HTMX in larger applications and the potential performance trade-offs. We also talk…
…
continue reading
1
Unlocking Strategic Value from a Bug Bounty Program
27:14
27:14
Play later
Play later
Lists
Like
Liked
27:14
Are you curious about how to maximize the strategic value and impact of your bug bounty program? In this episode, you can learn how Adobe continuously develops and improves its bounty program to engage security researchers and hackers globally and improve its security posture from an adversary perspective. In this ISACA Podcast, Chris McGown, ISACA…
…
continue reading
This episode is for the birds! How exactly do these winged wonders help us out in the garden? We’ll talk to Gretchen Abrams from the Detroit Bird Alliance to find out! We’ll also hear our favorite birdsong “Birdies” from our very first album. Did you know Announcer Guy is bird-sitting Gertrude the Talking Parrot? We can’t wait for you to meet her o…
…
continue reading
1
[discussion] A Retrospective and Future Look Into DAY[0]
1:03:55
1:03:55
Play later
Play later
Lists
Like
Liked
1:03:55
Change is in the air for the DAY[0] podcast! In this episode, we go into some behind the scenes info on the history of the podcast, how it's evolved, and what our plans are for the future. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/253.html [00:00:00] Introduction[00:01:30] Early days of the …
…
continue reading
1
Episode 67: VDPs & Accidental Program VS Hacker Debate Part 2
1:19:51
1:19:51
Play later
Play later
Lists
Like
Liked
1:19:51
Episode 67: In this episode of Critical Thinking - Bug Bounty Podcast we deepdive on the topic of Vulnerability Disclosure Programs (VDPs) and whether they are beneficial or not. We also touch on the topic of leaderboard accuracy, and continue the Program VS Hacker debate regarding allocating funds for bounties. Follow us on twitter at: @ctbbpodcas…
…
continue reading
Flowers are fantastic and veggies are vital, but what about growing grains? Packed with power and tastefully tiny, grains can be a wonderful adventure in the garden! Today, we’re welcoming Claire Smith from Tenera Grains to tell us more! We’ll also tickle your ears with our original song “Quinoa”! It’s a great grain Gro-Town celebration! Gro-Town C…
…
continue reading
1
Episode 66: CDN-CGI Research, Intent To Ship, and Louis Vuitton
58:20
58:20
Play later
Play later
Lists
Like
Liked
58:20
Episode 66: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss the recent YesWeHack Louis Vuitton LHE, the importance of failure as growth in bug bounty, and Justin shares his research on CDN CGI. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@…
…
continue reading
Matt, Izar, and Chris take issue with a controversial blog post that criticizes STRIDE as being outdated, time-consuming, and does not help the right people do threat modeling. The post goes on to recommend that LLMs should handle the task. The trio counters these points by highlighting STRIDE's origin, utility, and adaptability. Like any good inst…
…
continue reading
Gardening can be part of a heathy lifestyle for everyone! Magnificent minerals, vibrant vitamins! To tell us more is Jacalenne Christian from the Michigan State University Extension’s Health and Nutrition Institute. We’ll also pay homage to one of our favorite healthy garden goodies with a song from our latest album: Fava Beans! All this plus Annou…
…
continue reading
1
CROC Talks: Helping Secure Hugging Face Hub - Special Guest: Shir Tamari
11:05
11:05
Play later
Play later
Lists
Like
Liked
11:05
🚨 BREAKING: Wiz Research identifies critical risks in #AI-as-a-service 🚨Dive into Crying Out Cloud's latest episode, featuring a very special guest, Shir Tamari, head of the research team at Wiz. This episode sheds light on the security challenges that come with the rapid integration of AI technologies. Highlights include:🚀 Exploring the rapid inte…
…
continue reading
1
Episode 65: Motivation and Methodology with Sam Curry (Zlz)
2:29:05
2:29:05
Play later
Play later
Lists
Like
Liked
2:29:05
Episode 65: In this episode of Critical Thinking - Bug Bounty Podcast we sit down with Sam Curry to discuss the ethical considerations and effectiveness of hacking, the importance of good intent, and the enjoyment Sam derives from pushing the boundaries to find bugs. He shares stories of his experiences, including hacking Tesla, online casinos,Star…
…
continue reading
Chris, Matt, and Izar discuss a recent Secure by Design Alert from CISA on eliminating SQL injection (SQLi) vulnerabilities. The trio critiques the alert's lack of actionable guidance for software manufacturers, and they discuss various strategies that could effectively mitigate such vulnerabilities, including ORMs, communicating the why, and the i…
…
continue reading
The backdoor in XZ Utils is shaking the industry 🔔How could we not talk about it? Tune in to the special unscheduled episode of Crying Out Cloud with Eden Naftali and Amitai Cohen as they delve into the stealthy supply chain attack! In this episode:🔍 The Alert from CISA regarding CVE-2024-3094, a vulnerability in XZ Utils Data Compression Library v…
…
continue reading
1
Episode 64: .NET Remoting, CDN Attack Surface, and Recon vs Main App
1:08:04
1:08:04
Play later
Play later
Lists
Like
Liked
1:08:04
Episode 64: In this episode of Critical Thinking - Bug Bounty Podcast we talk about Justin and Joel delve into .NET remoting and how it can be exploited, a recent bypass in the Dom Purify library and some interesting functionality in the Cloudflare CDN-CGI endpoint. They also touch on the importance of collaboration and knowledge sharing, JavaScrip…
…
continue reading
1
CROC News: Malicious Repos, Bandwidth Theft, & NVD or NoVD?
31:50
31:50
Play later
Play later
Lists
Like
Liked
31:50
🎙️ What is a better way to stay updated on cloud security than a NEW Crying Out Cloud episode!Join Eden Naftali and Amitai Cohen as they explore what is new and 🔥:👾 Open-source repos flooded by malicious code.💻 What is to become of the National Vulnerability Database?⛓️ Proof of bandwidth cryptojacking🛠️ Critical vulnerabilities discovered in popul…
…
continue reading
In this episode, delve into the world of cyber security through the lens of expert threat hunters. As they navigate the complex digital landscape, these skilled professionals employ advanced techniques and tools to investigate systems meticulously. Their mission: to unearth hidden implants and payloads that lurk undetected, posing significant risks…
…
continue reading
1
How I Learned to Stop Worrying and Love the AI
42:19
42:19
Play later
Play later
Lists
Like
Liked
42:19
Dive into the contentious world of AI in software development, where artificial intelligence reshapes coding and application security. We spotlight the surge of AI-generated code and the incorporation of copy-pasted snippets from popular forums, focusing on their impact on code quality, security, and maintainability. The conversation critically exa…
…
continue reading
Episode 63: In this episode of Critical Thinking - Bug Bounty Podcast we welcome back Jason Haddix (From Episode 12) to talk about some updates to his The Bug Hunter's Methodology, as well as his own personal life and hacking journey. We talk about the start of his new company, and then venture into topics such as using threat intelligence and buyi…
…
continue reading
On this episode meet our CEO, Anders Reeves, as he interviews Swarm Director, Louis Blackburn, on the topics of the 'Cyber Kill Chain' and how 'Initial Access Brokers' (IAB) play a key role in enabling mass negative impact by threat actors seeking to deploy Ransomware, and more. Watch on YouTube! Thanks for listening! Follow us on LinkedIn.…
…
continue reading
1
[binary] Bypassing KASLR and a FortiGate RCE
29:47
29:47
Play later
Play later
Lists
Like
Liked
29:47
Bit of a lighter episode this week with a Linux Kernel ASLR bypass and a clever exploit to RCE FortiGate SSL VPN. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/252.html [00:00:00] Introduction [00:00:29] KASLR bypass in privilege-less containers [00:13:13] Two Bytes is Plenty: FortiGate RCE with…
…
continue reading
1
CROC Talks: Bug Bounty Hunting & Pen Testing with Sam Curry
41:13
41:13
Play later
Play later
Lists
Like
Liked
41:13
The NEW exclusive interview with hacker extraordinaire Sam Curry on Crying Out Cloud is out! Join Eden Naftali and Amitai Cohen as they explore the role of a Bug-Bounty Hunter with Sam Curry: 🔑 Learn about Sam's journey into security research 🛠️ Favorite tools and underrated platforms 🤖 The trustworthiness implications of AI-driven technologies in …
…
continue reading
1
A Fist Full of Zap - Space Fuzz part 2
1:48:07
1:48:07
Play later
Play later
Lists
Like
Liked
1:48:07
Our reluctant space cops follow the clues to their shocking conclusion.By Sunday-Skypers
…
continue reading
1
[bounty] RCE'ing Mailspring and a .NET CRLF Injection
43:19
43:19
Play later
Play later
Lists
Like
Liked
43:19
In this week's bounty episode, an attack takes an XSS to RCE on Mailspring, a simple MFA bypass is covered, and a .NET CRLF injection is detailed in its FTP functionality. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/251.html [00:00:00] Introduction [00:00:20] Making Desync attacks easy with TR…
…
continue reading
1
Secure by Default in the Developer Toolset and DevEx
43:46
43:46
Play later
Play later
Lists
Like
Liked
43:46
Matt, Chris, and Izar talk about ensuring security within the developer toolset and the developer experience (DevEx). Prompted by a recent LinkedIn post by Matt Johansen, they explore the concept of "secure by default" tools. The conversation highlights the importance of not solely relying on tools but also considering the developer experience, sug…
…
continue reading
Episode 62: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel are back with some additional research resources that didn’t make the Portswigger Top-Ten, but that are worth looking at. Follow us on twitter at: @ctbbpodcast Feel free to send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the aw…
…
continue reading
1
[binary] Future of Exploit Development Followup
46:41
46:41
Play later
Play later
Lists
Like
Liked
46:41
In the 250th episode, we have a follow-up discussion to our "Future of Exploit Development" video from 2020. Memory safety and the impacts of modern mitigations on memory corruption are the main focus.
…
continue reading
1
[bounty] libXPC to Root and Digital Lockpicking
45:35
45:35
Play later
Play later
Lists
Like
Liked
45:35
In this episode we have an libXPC root privilege escalation, a run-as debuggability check bypass in Android, and digital lockpicking on smart locks. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/249.html [00:00:00] Introduction [00:00:21] Progress OpenEdge Authentication Bypass Deep-Dive [CVE-20…
…
continue reading
1
Debating the Priority and Value of Memory Safety
34:58
34:58
Play later
Play later
Lists
Like
Liked
34:58
Chris, Izar, and Matt tackle the first point of the recent White House report, "Back to the Building Blocks: a Path toward Secure and Measurable Software." They discuss the importance of memory safety in software development, particularly in the context of critical infrastructure. They also explore what memory safety means, citing examples like the…
…
continue reading
1
Episode 61: A Hacker on Wall Street - JR0ch17
1:27:00
1:27:00
Play later
Play later
Lists
Like
Liked
1:27:00
Episode 61: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by Jasmin Landry to share some stories about startup security, bug bounty, and the challenges of balancing both. He also shares his methodology for discovering OAuth-related bugs, highlights some differences between structured learning and self-teaching, and then…
…
continue reading
In this week's binary episode, Binary Ninja Free releases along with Binja 4.0, automated infoleak exploit generation for the Linux kernel is explored, and Nintendo sues Yuzu. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/248.html [00:00:00] Introduction [00:00:31] Binary Ninja Free [00:10:25] K…
…
continue reading
A shorter episode this week, featuring some vulnerabilities impacting Google's AI and a SAML auth bypass. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/247.html [00:00:00] Introduction [00:00:31] We Hacked Google A.I. for $50,000 [00:17:26] SAML authentication bypass vulnerability in RobotsAndPe…
…
continue reading
1
Episode 60: Our Take on PortSwigger's Top 10 Web Hacking Techniques of 2023
1:24:37
1:24:37
Play later
Play later
Lists
Like
Liked
1:24:37
Episode 60: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel review the Portswigger Research list of top 10 web hacking techniques of 2023. Follow us on twitter at: @ctbbpodcast Send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the awesome intro music! ------ Links ------ Follow your hosts…
…
continue reading
VirtualBox has a very buggy driver, PostgreSQL has an Out of Bounds Access, and lifetime issues are demonstrated in Rust in "safe" code. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/246.html [00:00:00] Introduction [00:00:22] cve-rs [00:18:28] Oracle VM VirtualBox: Intra-Object Out-Of-Bounds Wr…
…
continue reading
Tune in to the inaugural episode of "The Cyber Standard Podcast," “The Vision!” Join host Ameet Jugnauth as he interviews Robin Lyons, ISACA Principal, IT Audit Professional Practices, and Annmarie Dann, Director of Professional Standards at the UK Cyber Security Council, in a compelling discussion about the standardization of specialisms in cybers…
…
continue reading
1
[bounty] A PHP and Joomla Bug and some DOM Clobbering
48:30
48:30
Play later
Play later
Lists
Like
Liked
48:30
This week's episode features a cache deception issue, Joomla inherits a PHP bug, and a DOM clobbering exploit. Also covered is a race condition in Chrome's extension API published by project zero. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/245.html [00:00:00] Introduction [00:00:21] Cache Dec…
…
continue reading
Matt, Izar, and Chris discuss the impact of fear, uncertainty, and doubt (FUD) within cybersecurity. FUD is a double-edged sword - while it may drive awareness among consumers, it also leads to decision paralysis or misguided actions due to information overload. The saturation of breach reports and security threats also desensitizes users and blurs…
…
continue reading
1
A Fist Full of Zap - Space Fuzz, Part 1
1:19:12
1:19:12
Play later
Play later
Lists
Like
Liked
1:19:12
A con man and a robot serving as space cops look for a missing person.By Sunday-Skypers
…
continue reading
1
CROC News: Automotive Code Leak & Midnight Blizzard's Heist
28:02
28:02
Play later
Play later
Lists
Like
Liked
28:02
Loading from the Cloud... Season 2 of "CRYING OUT CLOUD" is here!Join our hosts, Eden and Amitai, as they dive into the latest cloud stories that we can't wait to share with youHere's a sneak peek into the season's opening: 🚗 Mercedes-Benz Source Code Exposure:A public GitHub Repo was exposed - allowing unauthorized access to the company's internal…
…
continue reading
1
Episode 59: Bug Bounty Gadget Hunting & Hacker's Intuition
1:39:09
1:39:09
Play later
Play later
Lists
Like
Liked
1:39:09
Episode 59: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss the concept of gadgets and how they can be used to escalate the impact of vulnerabilities. We talk through things like HTML injection, image injection, CRLF injection, web cache deception, leaking window location, self-stored XSS, and much more. Follow us …
…
continue reading
Linux becomes a CNA and takes a stance on managing CVEs for themselves, and underutilized fuzzing strategies are discussed. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/244.html [00:00:00] Introduction [00:00:14] What to do about CVE numbers - The first article we bring up is the 2019 LWN artic…
…
continue reading
1
Measuring Security Risk Against Dynamic Threats
28:34
28:34
Play later
Play later
Lists
Like
Liked
28:34
Getting dressed is a routine example of everyday life packed with choices. Should I wear pants or shorts? Do I need a sweater? Shoes or sandals? While we often make these choices subconsciously, even actions that don’t appear as choices include several microscopic risk-based calculations. These judgments are executed based on some estimate of risk,…
…
continue reading
Listen to our COO Luke Potter and our new Swarm Director talking about red team services, how the industry looks and how to ensure you choose the perfect cybersecurity partner. Thanks for listening! Follow us on LinkedIn.By CovertSwarm - The Podcast
…
continue reading
1
[bounty] GhostCMS, ClamAV, and the Top Web Hacking Techniques of 2023
47:19
47:19
Play later
Play later
Lists
Like
Liked
47:19
In this bounty episode, some straightforward bugs were disclosed in GhostCMS and ClamAV, and Portswigger publishes their top 10 list of web hacking techniques from 2023. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/243.html [00:00:00] Introduction [00:02:15] Ghost CMS Stored XSS Leading to Owne…
…
continue reading
1
Prioritizing AppSec: A Conversation Between a VP of Eng, a Product Manager, and a Security "Pro"
37:09
37:09
Play later
Play later
Lists
Like
Liked
37:09
Prompted by fan mail, Chris, Izar, and Matt engage in a role-playing scenario as a VP of engineering, a security person, and a product manager. They explore some of the challenges and competing perspectives involved in prioritizing application security. They highlight the importance of empathy, understanding business needs and language, and buildin…
…
continue reading
1
Episode 58: Youssef Sammouda - Client-Side & ATO War Stories
1:54:51
1:54:51
Play later
Play later
Lists
Like
Liked
1:54:51
Episode 58: In this episode of Critical Thinking - Bug Bounty Podcast we finally sit down with Youssef Samouda and grill him on his various techniques for finding and exploiting client-side bugs and postMessage vulnerabilities. He shares some crazy stories about race conditions, exploiting hash change events, and leveraging scroll to text fragments…
…
continue reading
1
[binary] kCTF Changes, LogMeIn, and wlan VFS Bugs
33:53
33:53
Play later
Play later
Lists
Like
Liked
33:53
Google makes some changes to their kCTF competition, and a few kernel bugs shake out of the LogMeIn and wlan VFS drivers. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/242.html [00:00:00] Introduction [00:00:29] Netfilter Tables Removed from kCTF [00:20:23] LogMeIn / GoTo LMIInfo.sys Handle Dupl…
…
continue reading
1
Reflecting on 25 Years of Information Security Matters
13:54
13:54
Play later
Play later
Lists
Like
Liked
13:54
ISACA recently marked the 25th anniversary of Steve Ross’ ISACA Journal Information Security Matters column. Over the last quarter century, technology, security, and the workforce have evolved, while certain challenges remain the same. In this ISACA Podcast episode, Safia Kazi speaks to Steve about how he started writing for the Journal, societal s…
…
continue reading
1
[bounty] The End of a DEFCON Era and Flipper Zero Woes
1:16:22
1:16:22
Play later
Play later
Lists
Like
Liked
1:16:22
DEF CON moves venues, the Canadian government moves to ban Flipper Zero, and some XSS issues affect Microsoft Whiteboard and Meta's Excalidraw. Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/241.html [00:00:00] Introduction [00:00:33] DEF CON was canceled. [00:16:42] Federal action on combatting …
…
continue reading
1
Villainy, Open Source, and the Software Supply Chain
32:02
32:02
Play later
Play later
Lists
Like
Liked
32:02
Matt, Izar, and Chris have a lively discussion about how security experts perceive open-source software. Referencing a post that described open source as a 'hive of scum and villainy,' the team dissects the misconceptions about open source software and challenges the narrative around its security. They explore the complexities of the software suppl…
…
continue reading
1
Episode 57: Technical breakdown from Miami Hacking Event - H1-305
32:34
32:34
Play later
Play later
Lists
Like
Liked
32:34
Episode 57: In this episode of Critical Thinking - Bug Bounty Podcast, Justin and Joel are live from Miami, and recap their experience and share takeaways from the live hacking event. They highlight the importance of paying attention to client-side routing and the growing bug class of client-side path traversal. They also discuss the challenges of …
…
continue reading
