Highest Rated Comments


brxxn013 karma

I've made over $15,000 from various bug bounty programs.

brxxn07 karma

It usually depends on the company, their tech stack, and how many bug bounty hunters research it. It's sometimes super simple to find exploits in a company (under 3 hours) and sometimes it can be extremely hard. Usually, bug bounties that have hard scopes will pay more for an attack than companies with easier scopes. However, if you're trying to get started, I'd recommend looking at easier scopes first and then moving into harder scopes.

brxxn06 karma

There's obviously a good amount of knowledge you need about programming, but it's not too much if you're interested in the field. Learning programming is a useful skill in this field, and it can also be used for other fields, too. You don't need to know too much programming, but you will need to familiarize yourself with common knowledge of networking, HTTP, and how websites and programs work. There are many resources on the internet to help people who are interested in this field get started, some of which I included in the original post.

brxxn05 karma

iPhones are not immune to hacking, but anti-viruses do nothing to make your phone more secure. I would recommend just making sure you are on the latest version of iOS, as otherwise your phone will be vulnerable to more bugs. Apple actually runs a bug bounty program for bugs found in iOS. Security fixes are added in every update by Apple to make sure phones are more secure and safer. I'd also recommend not installing an app unless you trust it and not visiting weird websites.

brxxn04 karma

This is a major issue in the cybersecurity field, which can provide vectors for serious attacks. The solution many people have decided to work with is securing their app as much as possible from the other malicious apps rather than assume the user won't install anything bad. Obviously, apps with administrator permission or read/write on webpages can steal lots of information and there's nothing that cybersecurity analysts or companies can do. A lack of care is an extreme problem, and it's something I'd also like to raise awareness about, too.