News for hackers. Stuff that matters.

A comment on 38TB of data accidentally exposed by Microsoft AI researchers. Parent comment

Re:38TB of data accidentally exposed by Microsoft AI researc... by prmoustache on Monday September 18, 2023 @12:41PM (#37558552)
pentest means penetration testing which mean one need to take the attacker hat and try to enter your network or the app infrastructure and get as much data as he can, be it institutionnal or customer data. It can be through technical means as well as social engineering practices. And then report back.

This is in no way related to a bug bounty program.

[ Parent | on HN ]
Re:38TB of data accidentally exposed by Microsoft AI researc... by nbk_2000 on Monday September 18, 2023 @01:03PM (#37558838)
Counter point: Most of the top rated Bug Bounty hunters have a background in penetration testing.

I think it's more accurate to say Bug Bounty only covers a small subset of penetration testing (mainly in that escalation and internal pivoting are against the BB policy of most companies).

[ Parent | on HN ]