Bug Bounty JP Podcast

BBJP_Podcast #12


Listen Later

Speakers

  • morioka12 (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@scgajge12⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)
  • mokusou (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@Mokusou4⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)
  • RyotaK (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@ryotkak⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)
  • Summary (Linkのみ)

    • [大テーマ] 最近の取り組みについて
      • Meta Bug Bounty scope
        • ⁠https://bugbounty.meta.com/scope/⁠
        • https://x.com/NahamSec/status/1873779040693231680
        • Clone2Leak: Your Git Credentials Belong To Us
          • https://flatt.tech/research/posts/clone2leak-your-git-credentials-belong-to-us/
          • https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx
          • https://github.com/gogs/gogs
          • https://github.com/go-gitea/gitea
          • DUMANGキーボード 再配置可能なマグネット付きメカニカルキーボード
            • https://akizukidenshi.com/catalog/g/g114963/
            • [中テーマ] トレンドの出来事や脆弱性についてなど
              • Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History
                • https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak
                • Attacks on Maven proxy repositories
                  • https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/
                  • Stealing HttpOnly cookies with the cookie sandwich technique
                    • https://portswigger.net/research/stealing-httponly-cookies-with-the-cookie-sandwich-technique
                    • WorstFit: Unveiling Hidden Transformers in Windows ANSI!
                      • https://blog.orange.tw/posts/2025-01-worstfit-unveiling-hidden-transformers-in-windows-ansi/
                      • Pwn2Own Automotive 2025
                        • https://x.com/thezdi/status/1882694954415439915
                        • https://x.com/SinSinology
                        • DoubleClickjacking: A New Era of UI Redressing
                          • https://www.paulosyibelo.com/2024/12/doubleclickjacking-what.html
                          • Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
                            • https://samcurry.net/hacking-subaru
                            • [Q&A] なし
                            • Web Page

                              • ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://bugbountyjppodcast.notion.site/Bug-Bounty-JP-Podcast-8bf1080383a54c4a8848f10bfeb874b3?pvs=4⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠
                              • Survery

                                • ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://forms.gle/wkr2jkc3m9o8NhPk7⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠
                                • BBJP_Podcast で話して欲しいテーマや聞きたいことなどを Google Form で募集しています。

                                  感想も X(Twitter)でハッシュタグ「#BBJP_Podcast」や Google Formでいただけると嬉しいです。

                                  ...more
                                  View all episodesView all episodes
                                  Download on the App Store

                                  Bug Bounty JP PodcastBy morioka12