News for hackers. Stuff that matters.

A comment on The best Hacker on HackerOne is now an AI.

Re:The best Hacker on HackerOne is now an AI by keisborg on Wednesday June 25, 2025 @10:54AM (#44378064)
«XBOW submitted nearly 1,060 vulnerabilities. All findings were fully automated, though our security team reviewed them pre-submission to comply with HackerOne’s policy on automated tools»

That seems a bit unethical. I’ve thought companies specifically deny usage of automated tools. A bit too late ey…?

[ Parent | on HN ]
Re:The best Hacker on HackerOne is now an AI by 8200_unit on Wednesday June 25, 2025 @12:01PM (#44378781)
They acknowledge that in the article and all submissions are human reviewed before they are submitted.
[ Parent | on HN ]
Re:The best Hacker on HackerOne is now an AI by keisborg on Wednesday June 25, 2025 @12:48PM (#44379364)
The policies states it’s not allowed to use automated tools, not to submit report using automated tools alone. Human review does not really change that.
[ Parent | on HN ]
Re:The best Hacker on HackerOne is now an AI by slt2021 on Wednesday June 25, 2025 @02:39PM (#44380544)
if a human reviewer can repro the bug, there is no difference between automated or human found bug.

bug works and is repro - as a software owner, do you care if human or ai found it?

[ Parent | on HN ]
Re:The best Hacker on HackerOne is now an AI by keisborg on Wednesday June 25, 2025 @02:56PM (#44380724)
I cannot answer for all the program owners, but I imagine that there are other concerns than reproducibility
[ Parent | on HN ]