The Bug Bounty Battlefield: A Choose Your Own Adventure Story on Why I Stopped Reporting Bugs

No ratings

Presented at SaintCon 2024 by

Trent Lo

In 2020, I made the difficult decision to step away from bug bounties due to the toll it took on my motivation and passion for bug hunting. The constant need to justify my findings became overwhelming, leading me to reevaluate my participation in the field. Join me on an interactive journey, where you have the unique power to choose which stories I'll share. From the vendor who patched without paying to the company that still has my report open four years later, we'll explore the untold tales behind the unreleased infamous zWarDial tool. Through these experiences, I hope to shed light on the challenges faced by security researchers and inspire the industry to create a more streamlined and fair environment. Together, we'll delve into the stories from platforms like Zoom, Microsoft, Evite, Eventbrite, Google, and AOL, recognizing the critical role of security researchers in safeguarding our digital world.