Hacker News Reader

"Having a CS degree" (or equiv. experience) is basically baseline knowledge floor for hacking. It's not possible to get someone with 0 computer skills in May 2021, and have them cracking bounties by 2022.

View on HN

One of our most prolific bug bounty hunters did exactly that. And what is even more impressive / exotic is how he finds the bugs. With "just" a browser and very little Burping.

Anecdotical, but it happens.

Honestly that sounds more like a problem with your code base rather than any exceptional skill.

Hosting multiple 100's of internally build complex services tends to enlarge the attack space quite drastically.

Where I agree most bugs are self inflicted, there are plenty found in acquired software too.

Where may I read more about said person

I am not at liberty to dox him :) Asked him but he pervers his relative anonymity.

Flat out untrue, I know a friend who started in the field out of high school and was getting DA in places before he could even drink.

EDIT: My bad, misread your comment.

What's DA?

Direct Access?

Domain Admin. Total control of a Windows network, equivalent to having root on a Linux box.

Reply on news.ycombinator.com