News for hackers. Stuff that matters.

A comment on How to prevent email spoofing, using an unholy combination of silly standards. Parent comment

Re:How to prevent email spoofing, using an unholy combinatio... by thaumasiotes on Monday August 16, 2021 @02:27AM (#28195468)
Email-spoofing-related records will be checked for you probably dozens of times a week if you offer a public bug bounty through any of the popular platforms. You can get all the advice on them you want for under $100 in payouts. They are among the lowest of low-hanging fruit.
[ Parent | on HN ]
Re:How to prevent email spoofing, using an unholy combinatio... by JohannesH on Monday August 16, 2021 @05:08AM (#28196224)
What are the popular platforms for this?
[ Parent | on HN ]
Re:How to prevent email spoofing, using an unholy combinatio... by thaumasiotes on Monday August 16, 2021 @05:14AM (#28196265)
Off the top of my head, HackerOne and BugCrowd.

If you're thinking of setting up a program, it's worth your time to read over some existing program policies - those policies encapsulate a lot of experience that the existing programs have had on their platforms. Your ideal policy will probably differ, but it's worth thinking about why the other program policies are the way they are.

https://hackerone.com/twitter?type=team

[ Parent | on HN ]