Well, it’s been an interesting 24 hours to watch this play out and there’s been a lot of conversation about using submission data for training. I want to be very clear on Bugcrowd’s position. Hackers are and continue to be the heart of @Bugcrowd. We are a part of the community and value the work the researcher community does to help customers identify vulnerabilities. AI is here to stay and will play a large role in cybersecurity going forward. However, that doesn’t change our commitment to the hacker community. We’ve been exploring ways to bring hackers along for the journey - not replace them with AI - and have been working in conjunction with members of the community, our own team & our Hacker Advisory Board to figure out the right way to incentivize and monetize AI-driven products for the hackers contributing. We won’t get everything right, but you have our commitment to be transparent as we strive to get this right and chart a path towards a human+AI future.

feels..

Unprompted Australia CFP is open! Send your best research 👇👇👇

I wanted a screenshot tool for macOS better than anything out there, so I built one with @claudeai Native Swift. No Electron. Annotate, record screen, scroll capture, auto-redact PII, beautify, upload to Drive & more — one flow. Free & open source forever. macshot 🔗👇

Agree... though margins are so thin for farmers, and most people don't like to pay what it costs a larger grower to allow them to sell with the losses they incur without herbicide, unfortunately

Depending how particular you are with chemicals, also be sure to ask properties if they participate in the Woolworths/Coles scrap system. They provide free vegetables by the trailer load for properties to compost/use, but does mean there's going to be trace chemicals that way

If you want to grow yourself, you can source more natural fertilizer via horse properties using the same method. Chickens also work well, provided you compost coop straw to give it time to rest before using it. You can also trade the eggs for vegetables easily.

For QLD, lychee, mango, macadamia, all citrus, guava and avocado are some of the easiest to source this way. I'm sure you know of strawberry sources where you are, but also grapes can be found around the hinterland region quite easily (though more bitter than you may be used to)

Fruits are the easiest, especially citrus, as everybody always has ample. You can get lemons year round easily this way. Eggs are also easy. Vegetables are a lot harder, as most won't grow it in excess, and meat is the hardest, given the regulations around it prevent this

Not easy, but smaller growers do make it easier. Use an LLM to identify what grows each time of the year, and then join Facebook communities for rural areas near you and post asking who has them available

Nice as the idea is, in execution it’s very hard to get enough diversity and calories off the land to fully sustain without outside sources

How do you get into cyber? Need to bridge the gap from no experience to jr? Today we are releasing three modules for FREE from our course “Hacking Your Career”! These modules cover my favorite training resources across every domain: Blue, Purple, and Red additionally organized by cost tier: free, cheap, and expensive. Each recommendation made the cut because it actually builds skill, and most include certifications you can add to your resume! executiveoffense.beehiiv.com…

There’s a process called aged submissions that should re-surface these to the customer on a regular basis. It doesn’t look like it trig'd here (since priv comments aren’t showing on the timeline). I’ve raised it to confirm why and to see if we can get this addressed for you now

Not quite following all the specifics here, but if you can send me a sub id ill dig I’ll have someone take another look at this later today for you

I've passed this to the rep for this customer now, they will reach out on your behalf

No, not at all! Was completely unrelated

You're welcome to that opinion, but it is a Sunday afternoon, father's day, and I've gone to the office, and then taken 30mins out to review your submissions, confirm with you their state, and try to teach you why it's a non-issue

I recommend going back to `9a25e17c-7e8a-40b8-afe6-7d59ceca4324` from three years ago, the two issues are the same and I explained it in more detail to you there.. That same lesson applies also on this newer submission

A good takeaway for your reporting is to always try to answer the question "as a hacker I could", in this case, you can demonstrate a cname is present, but not host content, or impact users or the customer negatively. If you believe otherwise, host an md5 of your username

With respect, you've only ever submitted five findings sporadically over three years, and in all but one of those, the triage team has engaged back and forth with you, despite all being non security issues