Re:Want to start hacking?
by dj_mc_merlin on Wednesday July 27, 2022 @10:20AM
(#32250702)
"Having a CS degree" (or equiv. experience) is basically baseline knowledge floor for hacking. It's not possible to get someone with 0 computer skills in May 2021, and have them cracking bounties by 2022.
[ Parent
| on HN ]
Re:Want to start hacking?
by WelcomeShorty on Wednesday July 27, 2022 @10:36AM
(#32250889)
One of our most prolific bug bounty hunters did exactly that. And what is even more impressive / exotic is how he finds the bugs. With "just" a browser and very little Burping.
Anecdotical, but it happens.
Honestly that sounds more like a problem with your code base rather than any exceptional skill.
Re:Want to start hacking?
by WelcomeShorty on Friday July 29, 2022 @02:03PM
(#32280031)
Hosting multiple 100's of internally build complex services tends to enlarge the attack space quite drastically.
Where I agree most bugs are self inflicted, there are plenty found in acquired software too.
Where may I read more about said person
Re:Want to start hacking?
by WelcomeShorty on Friday July 29, 2022 @01:59PM
(#32280002)
I am not at liberty to dox him :) Asked him but he pervers his relative anonymity.
Re:Want to start hacking?
by InfoSecErik on Wednesday July 27, 2022 @11:30AM
(#32251670)
Flat out untrue, I know a friend who started in the field out of high school and was getting DA in places before he could even drink.
EDIT: My bad, misread your comment.
What's DA?
Domain Admin. Total control of a Windows network, equivalent to having root on a Linux box.