Tor Project Launches Public Bug Bounty Program | Q&A with Tor Browser Team Lead, Geo

In January 2016, the Tor Project launched its first private bug bounty program on HackerOne. Today the Tor Project announced its public bug bounty program. We sat down with the Tor security team lead, Georg Koppen to learn more about the program, what it means for the industry, and how it fits into Tor’s security strategy. See the full Q&A below.


https://www.hackerone.com/application-se...lead-georg

What is your program’s Scope?

We are glad to announce our new functionality for defining Scope! HackerOne’s Vulnerability Taxonomy now includes Severity, Weakness type, and Asset.


https://www.hackerone.com/vulnerability-...rams-scope

Q&A With @MalwareTechBlog

When he’s not reverse engineering malware, Marcus Hutchins (aka @MalwareTechBlog) can be found surfing, partying, or traveling. That’s to be expected for any typical 22-year-old, except for the part where he stopped the WannaCry malware outbreak. This is part of his story...


https://www.hackerone.com/ethical-hacker...retechblog

Hey Hackers: We’ve got your free Burp Suite Professional license right here

Burp Suite is the premier offensive hacking solution, and now when new hackers reach at least a 500 reputation on HackerOne and have a positive signal, they are eligible for 3-months free of Burp Suite Professional.


https://www.hackerone.com/ethical-hacker...right-here

Key Findings From The Hacker-Powered Security Report: Responsive Programs Attract To

The Hacker-Powered Security Report found that hackers are overwhelmingly attracted to the programs that are the fastest at acknowledging, validating, and resolving submitted vulnerabilities.


https://www.hackerone.com/vulnerability-...ms-attract

Faster and Better: New Bank Transfer Payment Feature for Hackers

We’re happy to announce that we’re adding Bank Transfers as a payout option to complement Paypal and Coinbase. This feature will give you the ability to get paid out in 30 different currencies to almost any country in the world.


https://www.hackerone.com/ethical-hacker...re-hackers

How to: Recon and Content Discovery

Recon plays a major role while hacking on a program.  Recon doesn’t always mean to find subdomains belonging to a company, it also could relate to finding out how a company is setting up its properties and what resources they are using.


https://www.hackerone.com/ethical-hacker...-discovery

Security Risk Assessment Report - Key Facts

Our Hacker-Powered Security Report is so chock-full of compelling insights, interesting tidbits, and surprising stats that we decided to distill them down to just the top 100.


https://www.hackerone.com/ethical-hacker...-key-facts

Key Findings From The Hacker-Powered Security Report: Bounty Payments Are Increasing

As you can imagine, money talks. Better hackers — those with more experience and in-demand skills — go where the money is, and that means organizations that pay more generally get access to the best talent.


https://www.hackerone.com/company-news/k...easing-4-6

5 Hacker-Powered Trends You Need to Know About

For your quick reference, we’ve distilled the Hacker-Powered Security Report to 5 key trends that show how white-hat hackers are shaping the world of security.


https://www.hackerone.com/application-se...know-about