
Episode 94: Zendesk Fiasco & the CTBB Naughty List
Critical Thinking - Bug Bounty Podcast
00:00
Navigating Vulnerability Reporting: Insights from Zendesk's Case
This chapter examines the innovative security practices from companies like HackerOne, showcasing their unique marketing strategies and the challenges in vulnerability reporting. It highlights the complexities surrounding a vulnerability discovered in Zendesk's email system, discussing the implications of the company's handling and the nuances of security mediation. The discussion emphasizes the importance of effective communication and the obligations researchers face within bug bounty programs when their findings are dismissed.
Transcript
Play full episode