Viewing profile — addams

More or less confirmed: https://trustwallet.com/blog/announcements/trust-wallet-brow...

One of CZ's tweets hints at an insider threat, but Trust Wallet was one of the GitHub organizations pwned by Sha1 Hulud. What are the odds this is a fallout of that?

I think they just don't care. Their SECURITY.md mentions bug bounties, yet if your submission has anything to do with GitHub it's immediately disqualified. They refuse to remove th…

Microsoft's bug bounty program is a shell of its former self. They quietly disqualified a lot of high-impact findings in 2023. In my own experience: - Leaked service principal cred…

[dead]

> ... I have almost zero motivation for responsible disclosure schemes anymore. It's a bunch of paperwork only to be told it's "expected behaviour" or "not a bug", or at best recei…