Tootfinder

Opt-in global Mastodon full text search. Join the index!

@frankel@mastodon.top
2025-08-16 16:21:05

#EU Commission Reactivates #BugBounties
i-programmer.inf…

EU Commission Reactivates Bug Bounties
Programming book reviews, programming tutorials,programming news, C#, Ruby, Python,C, C++, PHP, Visual Basic, Computer book reviews, computer history, programming history, joomla, theory, spreadsheets and more.

@Techmeme@techhub.social
2025-08-06 10:20:59

Microsoft says it paid $17M to 344 security researchers across 59 countries between June 2024 to June 2025 via its bug bounty program; the top reward was $200K (Sergiu Gatlan/BleepingComputer)
bleepingcomputer.com/news/micr

@arXiv_csLO_bot@mastoxiv.page
2025-09-11 07:48:12

Exploring Formal Math on the Blockchain: An Explorer for Proofgold
Chad E. Brown, Cezary Kaliszyk, Josef Urban
arxiv.org/abs/2509.08267 arx…

Exploring Formal Math on the Blockchain: An Explorer for Proofgold
Proofgold is a blockchain that supports formalized mathematics alongside standard cryptocurrency functionality. It incorporates logical constructs into the blockchain, including declarations of formal theories, definitions, propositions and proofs. It also supports placing and collecting bounties on proving these propositions, incentivizing the development of the formal libraries contained in Proofgold. In this paper, we present a web-based blockchain explorer for Proofgold. The system exposes …

@grifferz@social.bitfolk.com
2025-09-06 11:06:32

Heard yer Da asks for bug bounties when he finds an Apache directory listing

@jonippolito@digipres.club
2025-08-29 12:02:23

"They’re unknowingly becoming the bad guys”: AI-powered bounty hunters think they’re helping, but their fabricated bug reports are overwhelming solo maintainers like cURL’s Daniel Stenberg—who’s paid $92K for real flaws and now may scrap the program.

A conference presenter with this quote: A lot of users are annoying. And that's not new. The new thing here is not the only the ease that you can produce this with AI, but also they actually think they are helping out....They're just unknowingly becoming the bad guys. —Daniel Stenberg, "Al slop attacks on the curl project"

#opensource #aicoding #aiethics #textpocalypse | Jon Ippolito
In another sign of a looming AI textpocalypse, open source maintainers are seeing a 20-40% rise in bogus bug reports that are just fishing for bounties. What’s remarkable is that submitters using AI to hunt for vulnerabilities seem to think they are really helping, whereas in fact they’re gumming up the system. Most open-source projects are maintained by single developers in their spare time. To get help, popular projects may offer financial rewards to community members who point out bugs…

@newsie@darktundra.xyz
2025-07-24 23:13:05

US hits senior North Korean officials with sanctions, $3 million bounties therecord.media/us-sanctions-n

US hits senior North Korean officials with sanctions, $3 million bounties
Kim Se Un, Jo Kyong Hun and Myong Chol Min are accused of helping North Korea evade U.S. and United Nations sanctions through an IT worker plot that involved tricking companies into hiring North Koreans using stolen identities.

@arXiv_csCR_bot@mastoxiv.page
2025-07-29 10:35:02

Program Analysis for High-Value Smart Contract Vulnerabilities: Techniques and Insights
Yannis Smaragdakis, Neville Grech, Sifis Lagouvardos, Konstantinos Triantafyllou, Ilias Tsatiris, Yannis Bollanos, Tony Rocco Valentine
arxiv.org/abs/2507.20672

Program Analysis for High-Value Smart Contract Vulnerabilities: Techniques and Insights
A widespread belief in the blockchain security community is that automated techniques are only good for detecting shallow bugs, typically of small value. In this paper, we present the techniques and insights that have led us to repeatable success in automatically discovering high-value smart contract vulnerabilities. Our vulnerability disclosures have yielded 10 bug bounties, for a total of over $3M, over high-profile deployed code, as well as hundreds of bugs detected in pre-deployment or unde…

@Techmeme@techhub.social
2025-07-25 01:26:19

The US Treasury sanctions three senior North Korean officials accused of tricking companies into hiring North Koreans using stolen identities as IT workers (Jonathan Greig/The Record)
therecord.media/us-sanctions-n

US hits senior North Korean officials with sanctions, $3 million bounties
Kim Se Un, Jo Kyong Hun and Myong Chol Min are accused of helping North Korea evade U.S. and United Nations sanctions through an IT worker plot that involved tricking companies into hiring North Koreans using stolen identities.