I want to share a interesting reading that I noticed when searching Mr. G for Ruby security.
I still didn’t finished reading it because lack of time but this weekend this will be on my to-do list.
Interesting reading about security bug bounty written by Eduardo Vela – http://sirdarckcat.blogspot.pt/2015/09/not-about-money.html
You got to love this part:
It is my view, that we shouldn’t call them “Bug Bounty Programs”, I would like them to be called “Bug Hunter Appreciation Programs”. I don’t like the term “Bug Bounty”, because bounty sounds a lot like it’s money up for grabs, when the attitude is that of a gift, or a “thank you, you are awesome”.
The final chapter of BinaryEdge work about Ashley Madison attack. Interesting data and just a little pick on it the percentage of female [fembots] are incredible low – 13.8%.
Also the Brian Krebs article about who hacked Ashley Madison is very good. Nice step-by-step investigation by the popular security journalist.
If you know portuguese language feel free to take a look: http://tek.sapo.pt/expert/artigo/ha_um_portugues_no_top_de_um_dos_maiores_programas_de_caca_ao_bug-43785gpm.html
Or else translate it at Google.
My portuguese friends at BinaryEdge published the first part of an interesting article about big and critical data lying around the web.
Take a look into it @ http://blog.binaryedge.io/2015/08/10/data-technologies-and-security-part-1/