$36k Google App Engine RCE

Re:$36k Google App Engine RCE by jcims on Monday May 21, 2018 @12:53PM (#17119797)

As someone who worked in a bug bounty program, the skill and age of this individual isn't what sets them apart. It's the write up.

[ Parent | on HN ]

Re:$36k Google App Engine RCE by sethherr on Monday May 21, 2018 @04:24PM (#17121531)

As someone who has been on the other end of receiving incoherent and inaccurate bug bounty reports, this!

To find the bug is impressive. To write about it so well is truly exceptional.

[ Parent | on HN ]

Re:$36k Google App Engine RCE by bitexploder on Monday May 21, 2018 @10:32PM (#17123363)

I always "joke" to people we are professional writers. Actually professional infosec consultants, but our life blood is coherently documenting everything we find and making pretty executive summaries. It is hard to overstate how much I have seen the reporting differentiate infosec consulting firms over then years. Which is not to say we don't value the hard technical skills, but writing is really, really important too.

[ Parent | on HN ]

Re:$36k Google App Engine RCE by jcims on Tuesday May 22, 2018 @06:18AM (#17124896)

The best part is when your kids complain about having to write a 1500 word essay and you show them what's up.

[ Parent | on HN ]