Viewing profile — SamHoustonCM

>We recently came across a suspicious NPM package called `buildrunner-dev`. The package is deceptively simple, containing a package.json with a postinstall hook pointed at an `init…

Matthew Remacle (Remy) digs into the newly disclosed Apache Struts2 CVE-2023-50164 file upload vulnerability. This weakness allows an attacker to drop a web shell that can be calle…

Why does Heroku have so many uptime issues? Seems to be happening every few months. Last week there was downtime, now again... Is Salesforce committed to Heroku?

(Full disclosure, I work at Bugcrowd) Check out Bugcrowd.com - we can manage the whole thing for you and we can even give your dev team remediation advice/information so that they …

There's a blog post on Bugcrowd about note taking techniques. Might be helpful for you! :) https://blog.bugcrowd.com/the-importance-of-notes-session-tr...

Awesome! Great to hear. Feel free to ping me if you have questions.

There are a ton of different directions that you can head in and focus on. I encourage you to start/look at stuff that you're genuinely interested in and excited about. I've writte…

Right but the cost differential between staffing it yourself and paying someone else to do it is substantial. Doing it yourself will cost you 3-5x more than paying someone else who…

(Disclosure: I work for Bugcrowd) That's why we suggest going with a 'managed' bounty. That's where Bugcrowd triages all of the incoming bugs and then passes along the valid bugs f…

Were you recruited to work on the bounty?

Agreed with others that it's worth considering a small private program. You can do time boxed bounties with a capped cost, that way you're getting results without committing to a h…

New programs are launching all the time or the scope of current programs is expanding out to include new products or features. It's never too late to get started, there's actually …

Yeah,running a public program and are handling a lot of submissions (pretty typical), handling the volume of bugs and evaluating them quickly can be quite tricky. Not only is it im…