Critical Thinking - Bug Bounty Podcast cover image

Critical Thinking - Bug Bounty Podcast

Episode 84: 0xLupin & Takeaways from Google's Las Vegas BugSwat

Aug 15, 2024
Roni Carta, known as 0xLupin and celebrated for their MVH win at Google LHE, joins the discussion to share insights from a recent collaborative hacking experience. They emphasize the importance of understanding business contexts when identifying vulnerabilities. Legal considerations in bug bounty hunting are also highlighted, showcasing the need for close collaboration between security and legal teams. Roni shares amusing anecdotes from the Google event, illustrating community bonds and the fascinating world of bug bounty hunting.
27:15

Episode guests

Podcast summary created with Snipd AI

Quick takeaways

  • Red Team strategies must evolve due to ring fencing technology, which blocks unauthorized access and renders traditional tactics ineffective.
  • Successful collaboration and contextual understanding during live hacking events can significantly enhance the identification of vulnerabilities in applications.

Deep dives

Impact of Ring Fencing on Red Team Tactics

The introduction of ring fencing technology significantly alters the approach for Red Team hacking. This feature creates an invisible barrier around applications, preventing them from interacting with system resources they normally would without restriction. As a consequence, traditional tactics like 'living off the land' are becoming ineffective, as any unauthorized access leads to automatic blocking. This change emphasizes the need for Red Teams to adjust their strategies and rethink their methodologies in a landscape that increasingly relies on enhanced security measures.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode