141–150 of 210 posts
> To the companies: You don’t need HackerOne anymore. The tokens to build your own in-house platform cost less than single year of HackerOne. You know, the biggest thing that HackerOne delivers is a universal payments system that requires absolutely no efforts from companies. Have you tried to manually pay hackers from around the world? It is a laborious process involving trying to find what providers are compatible…
Earlier quoted context omitted.
Exactly. Revolut is a bank that allows cryptocurrencies. HN really is living in their own bubble.
Revolut does not have a banking license in the US. At the moment they are a front for another bank. Don't be gullible and believe blindly what the marketing departments tell you.
The US is not the entire world.
Revolut has major banking licenses in Europe, UK and Mexico. That doesn't mean it is not bank.
Wells Fargo does not operate in the UK, but it is still a major bank in the US and it is still a bank.
Royal Bank of Scotland (RBS) is a bank in the UK. Just because it doesn't operate in the US, does not mean it isn't a bank.
> Don't be gullible and believe blindly what the marketing departments tell you.
Revolut is still a major bank even if they don't operate in the US (yet).
Earlier quoted context omitted.
why its fucking high ??
Italy has progressive taxes on salary, with marginal rates from 23% to 43%. The latter on income above €50k And if you've got taxes like that on earned income - shouldn't people with unearned income pay just as much? If your tax on investment gains is too small, you end up with an economy where the salaried worker renting a house pays more tax than their landlord, who owns ten houses.
money happened. it corrupts all. once there is enough of it going around people lose all senses and just want more.
> And to whoever is fired up: The market is ready for a disruption. The tools are in your hands. Build what HackerOne could have been.
This is a rallying cry that should echo across the entire tech industry. Build what * could have been.
Earlier quoted context omitted.
Not anymore! Most places allow this very easily now.
Exactly. Revolut is a bank that allows cryptocurrencies. HN really is living in their own bubble.
> To the companies: You don’t need HackerOne anymore. The tokens to build your own in-house platform cost less than single year of HackerOne. You know, the biggest thing that HackerOne delivers is a universal payments system that requires absolutely no efforts from companies. Have you tried to manually pay hackers from around the world? It is a laborious process involving trying to find what providers are compatible…
This (money transfer) is one thing Pix would solve trivially.
Earlier quoted context omitted.
Most bank transfers cannot be reversed without agreement between parties. You're using a b2c mindset for a b2b problem. Bitcoin is a b2b tool.
Bangladesh bank got its reversed when hacked by NK. Does that look b2c?
Earlier quoted context omitted.
It's not just the transfer of cash. It's also complying with tax and employment laws in the country the hacker is in, to the satisfaction of your legal and finance teams. Sure, in western-style legal systems you can call them a contractor and they can pay their own tax. Just don't employ them full time for long enough to trigger 'sham contract' rules that would make them employees. But your corporate legal team doesn…
Why would you or anyone in your American company care about complying with Tajikistan law?
CEO: "I'm not sure I like the idea of us inviting people to hack us - or paying a 'bounty' to hackers holding a knife to our throat. Will they at least agree to a binding NDA and terms of engagement, in advance?"
CISO: "No, they won't."
CEO: "Well, at least if the hackers are in poor countries, a $500 payout for a critical bug will be plenty, right?"
CISO: "No, critical issues will be 10-100x that"
CEO: "Well will the average quality of these reports better than those we get from our hired pentesters?"
CISO: "On average these will be the lowest quality reports you've ever seen. But 0.1% might be gold. Oh, and I need to hire 3 more guys to sift through these terrible reports. Also our sifters might miss the gold."
CEO: "Oh. Well at least we won't be breaking the law though, right?"
CISO: "Uh, about that..."
> To the companies: You don’t need HackerOne anymore. The tokens to build your own in-house platform cost less than single year of HackerOne. You know, the biggest thing that HackerOne delivers is a universal payments system that requires absolutely no efforts from companies. Have you tried to manually pay hackers from around the world? It is a laborious process involving trying to find what providers are compatible…
Literally just pay them in bitcoin. They're hackers, they'll be able to handle it.
Yet I still find it next to impossible to get issues resolved.
I'm a software engineer / tech bro by trade, and hacking and CTFs have always been a part time hobby for me, and thus I'm not part of the "elite" who get special treatment in the form of account managers and priority support.
I can't help but feel like I'm becoming an even smaller cog in this corporate machine than before - if you look at H1's website, the hacker community is now just 1/6th of their supposed offering, alongside all of the AI pentesting services.
The hacker community is precisely what this company was built on.
The trajectory that they're on, and the positioning that they're adopting, makes me feel like they're eager to "move on" to something beyond it. The financial incentive is certainly there.