Bugcrowd Blog
blog.bugcrowd.com · Company blog · on HN since 2013
Bugcrowd's company blog covers bug bounty programs, security research, vulnerability handling and hacker interviews.
What HN saysHN commenters link it for advice to bug bounty hunters, including note-taking methods and the legal risks of testing systems without permission.
15HN people shared it
2linked it in comments
28stories submitted
61story points
9 years agolast shared
2013people per year2026
Most-shared posts
- 1Bugcrowd Raises $6M Series A1 people · 7 points · first shared 2015 · discussion on HN
- 2Breaking Bugcrowd's CAPTCHA using Google Tesseract OCR1 people · 6 points · first shared 2013 · discussion on HN
- 3Reverse Engineering Pokemon Go1 people · 6 points · first shared 2016 · 1 comments on HN
- 4Top Bugcrowd Security Hackers of 20131 people · 4 points · first shared 2014 · discussion on HN
- 5Startup Security: 6 guidelines to handling a vulnerability submission1 people · 4 points · first shared 2014 · discussion on HN
- 6On Oracle, Mary Ann Davidson, and the dark side of security research1 people · 3 points · first shared 2015 · discussion on HN
- 7Google Sites: A Tale of Five Vulnerabilities1 people · 2 points · first shared 2014 · discussion on HN
- 8Interview w/ Hacker awarded Facebook's largest bug bounty to date1 people · 2 points · first shared 2014 · discussion on HN
- 9Bug Bounties Drive Sales? OR Why Market Your Bug Bounty Program1 people · 2 points · first shared 2014 · discussion on HN
- 10How to bypass 3rd-degree profiles in LinkedIn1 people · 2 points · first shared 2014 · discussion on HN
- 11When to properly reward a bug bounty submission1 people · 2 points · first shared 2014 · discussion on HN
- 12Using a Braun Shaver to Bypass XSS Audit and WAF1 people · 2 points · first shared 2016 · discussion on HN
- 13Attacking zone page metadata in iOS 7 & OS X Mavericks1 people · 2 points · first shared 2013 · discussion on HN
- 14List of currently acttive bug bounty programs1 people · 2 points · first shared 2013 · discussion on HN
- 15Target, Neiman Marcus, and Michaels breaches – We can do better1 people · 2 points · first shared 2014 · discussion on HN
What HN people wrote when they linked it
SamHoustonCM · 2017-10-27
There's a blog post on Bugcrowd about note taking techniques. Might be helpful for you! :) https://blog.bugcrowd.com/the-importance-of-notes-session-tracking-bug…
dewzi · 2014-12-08
Here's a blog post that offers advice: https://blog.bugcrowd.com/problem-cold-testing/
tl;dr The laws aren't going to side in your favor. Assuming this is a US-based airline, there are potential laws you should be aware of (Computer Fraud and Abuse Act & another one). But from this very high level, it sounds like you did a good job of cooperating and not disclosing it "inappropriately".
It just ends up rubbing people the wrong way to come out asking for a reward. If they have a program like this already, they will reward you. If they don't, this isn't going to be what convinces them to start one.