Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

今日から始めるbugbounty

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for kyo_ago kyo_ago
July 23, 2018
Programming
320
0

 今日から始めるbugbounty

Avatar for kyo_ago

kyo_ago

July 23, 2018

More Decks by kyo_ago

See All by kyo_ago
フロントエンドの リソース管理の話 TechFeed Summit#1 #techfeed #techfeedsummit
Avatar for kyo_ago kyo_ago
5
2k
TypeScriptでType Match的なことをする話 #すえなみチャンス暑気払い
Avatar for kyo_ago kyo_ago
1
1.4k
WebReplayから見るWeb開発の未来 #builderscon
Avatar for kyo_ago kyo_ago
2
1k
karmaを使ったSPA向けE2Eテスト技法
Avatar for kyo_ago kyo_ago
6
5.8k
E2Eという名称の指すもの
Avatar for kyo_ago kyo_ago
0
2.7k
How to use Scala.js in real world?
Avatar for kyo_ago kyo_ago
1
2.2k

Other Decks in Programming

See All in Programming
ソニーのクラウド共通基盤の変遷と AI時代の開発スタイルに合わせた進化 / The Journey of Sony’s Common Cloud Platform and Its Evolution for AI-Native Development
Avatar for KenjiYoneyama kenjiyoneyama
0
230
すこし踏み込む CancellationToken
Avatar for tkym htkym
2
1.6k
AWSに止められる覚悟してますか？
Avatar for モリゾー morizo_1984
2
520
Agentic Software Factoryに、すごく賢いIF文を。 / super smart IF statement into the Agentic Software Factory.
Avatar for r-kagaya rkaga
8
1.9k
そのリトライ、死んだコネクションを使い回していませんか ── GoのHTTPクライアントとHTTP/2を実プロダクト障害から学び直す
Avatar for Yusa Matsuda myus4a
0
390
自サークルのIdPからログアウトできるようになるまで
Avatar for taiseiue taiseiue
0
110
設計次第でAIコードの読む量は減らせる / designing-for-code-reading
Avatar for MinoDriven minodriven
34
15k
AI が書く Go コードの品質を劇的に向上させる Linter: “declscope”
Avatar for mpyw mpyw
0
480
AI時代のコードレビューは人に向けるな、仕組みに向けろ
Avatar for meijin texmeijin
5
3.5k
JAWS-UG 東京支部が始める、JAWS-UG支部コラボ / JAWS-UG lunchtime LT Collaboration
Avatar for y-ohgi y0hgi
0
190
Heart of Swift Concurrency
Avatar for Yuta Koshizawa koher
0
1.2k
The Rails Doctrine Decade
Avatar for Koichi ITO koic
2
510

Featured

See All Featured
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
38
3k
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
28
2.9k
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
8.1k
Leveraging Curiosity to Care for An Aging Population
Avatar for Cassini Nazir cassininazir
1
530
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
9
1.6k
We Analyzed 250 Million AI Search Results: Here's What I Found
Avatar for Josh Blyskal joshbly
2
2k
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
96
14k
The Director’s Chair: Orchestrating AI for Truly Effective Learning
Avatar for Mike Taylor tmiket
1
320
Large-scale JavaScript Application Architecture
Avatar for Addy Osmani addyosmani
516
110k
Faster Mobile Websites
Avatar for Dean Hume deanohume
310
32k
Measuring Dark Social's Impact On Conversion and Attribution
Avatar for Stephen Akadiri stephenakadiri
2
300
Designing for Performance
Avatar for Lara Hogan lara
612
70k

Transcript

  1. ࠓ೔͔Β࢝ΊΔ bugbounty

  2. ಺༰ •bugbountyͱ͸ •bugbountyͷར఺ •bugbountyͷ஫ҙ •bugbountyͷ࢝Ίํ •bugbountyͷӡ༻ •FAQ •͕࣌ؒ͋Ε͹

  3. bugbountyͱ͸

  4. bugbountyͱ͸ • ͍ΘΏΔʮ੬ऑੑใࠂʹର͢Δใ঑੍ۚ౓ʯ • ੬ऑੑ৘ใΛड͚෇͚ɺͦͷ৘ใʹର͓ͯۚ͠Λ෷͏

  5. bugbountyͱ͸ • ւ֎Ͱ͸͔ͳΓҰൠతʢMicrosoftɺGoogleɺFacebookɺ MozillaɺUberɺAppleɺAdobeɺͦͷଞࢥ͍ͭ͘اۀ͸ͩ ͍͍ͨɻAmazon͸΍ͬͯͳ͍͔΋ʁʣ • ࠃ಺Ͱ͸αΠϘ΢ζ͞ΜɺLINE͞ΜɺϐΫγϒ͞Μɺ Zaim͞ΜɺChatWork౳͕࣮ࢪ

  6. bugbountyͷར఺

  7. bugbountyͷར఺ • αʔϏεଆͰίϯτϩʔϧ͕Ͱ͖Δ
 ίετɺظؒɺن໛ΛαʔϏεଆͰίϯτϩʔϧ͢Δ͜ͱ ͕Ͱ͖Δ • අ༻͸0ʙແݶ • ظؒ͸ࠓ͔Β͍ͭ·ͰͰ΋ •

    ن໛͸୯Ұͷػೳ͔ΒαʔϏεશମ·Ͱ

  8. bugbountyͷ஫ҙ

  9. bugbountyͷ஫ҙ • ϗϫΠτϦετܗࣜͰͷνΣοΫͷ୅ΘΓͰ͸ͳ͍
 ͋͘·Ͱ΋ิ׬ؔ܎ɻͨͩ͠ɺิ׬ؔ܎ͱͯ͠͸ඇৗʹ૬ੑ͕͍͍ • ʢҰൠతʹʮୈࡾऀػؔͷݕূʯͱͯ͠͸ड͚ೖΕΒΕͳ͍ͱࢥ͏ʣ • ඇެ։ঢ়ଶͰͷࣄલݕূ͸Ͱ͖ͳ͍
 ࣄલݕূͱͯ͠ެ։͢Δ͜ͱ͸Ͱ͖Δ͚Ͳɺ׬શඇެ։ʹ͸Ͱ͖ͳ ͍

    • Τϥʔϩά͸େྔʹ૿͑Δ
 ՄೳͰ͋Ε͹ઐ༻؀ڥΛ༻ҙͨ͠΄͏͕͍͍

  10. bugbountyͷ࢝Ίํ

  11. bugbountyͷ࢝Ίํ • ࣾ಺ௐ੔ • ઌʹ΍͹͍ͱ͜ΖΛͬ͘͟Γચͬͯमਖ਼͢Δ

  12. bugbountyͷ࢝Ίํ • ੬ऑੑड෇༻ͷϑΥʔϜΛ࡞Δ
 ઌʹࣾ಺ମ੍Λߏங͢ΔͨΊ • ϓϥοτϑΥʔϜʹ৐Δ
 hackeroneɺbugbounty.jp

  13. bugbountyͷӡ༻

  14. bugbountyͷӡ༻ • ใࠂ͞Εͨ಺༰ͷτϥοΩϯά
 ϓϥοτϑΥʔϜʹ৐ͬͯ΋੬ऑੑ৘ใͷमਖ਼τϥοΩϯ ά·Ͱ͸ߦ͑ͳ͍ɻ
 ࣾ಺BTSͱඥ෇͚ͯͷ؅ཧ͸Ͱ͖ͳ͍ɻ
 खಈͰؤுΔ͔ɺͳΜΒ͔ͷ࢓૊Έ͕ඞཁ

  15. bugbountyͷӡ༻ • ӡӦϝϯόʔͰͲ͜·ͰΧόʔ͢Δ͔ʁ
 ৘ใڞ༗ͷൣғ
 ػೳ։ൃͱ੬ऑੑमਖ਼ͷ༏ઌ౓ͷ݉Ͷ߹͍ • ʢ͜ͷลɺ֤ࣾʹฉ͍ͯ΋ͦΕͧΕಠࣗͬΆ͍ͷͰϊ΢ϋ ΢͕͋ΔͬΆ͍ʣ

  16. FAQ

  17. ͍͘Β͔͔Δʁ

  18. ແྉͰ։࢝Մೳ ஈ֊తʹֹۚΛ্͍͚͛ͯ͹͍͍ ֤͕͍ࣾ͘Β͙Β͍͔͚ͯΔ͔͸ެ։ ৘ใ͔ΒਪଌՄೳ

  19. ੬ऑੑͬͯΑ͘Θ͔Β ͳ͍Μ͚ͩͲɻɻɻ

  20. ஌ࣝͳ͠Ͱ΋ग़དྷͳ͘͸ͳ͍ bugbounty.jpͳΒτϦΞʔδ Φϓγϣϯ͋Γ

  21. Ͳͷ͘Β͍ใࠂ͕དྷΔʁ

  22. ใ঑ֹۚͱαʔϏε࣍ୈ ใࠂ͕ଟ͗͢Δ৔߹ετοϓ΋͋Γ ֤ࣾͷެ։৘ใΛݟΔͱେମΘ͔Δ

  23. ແྉͩͱใࠂདྷͳ͍ͷ Ͱ͸ʁ

  24. ݱঢ়͸ಛʹࠃ಺ʹؔͯ͠͸ແྉͰ΋݁ߏདྷΔ ࿹ࢼ͠తͳਓͱ͔ɺϙΠϯτ໨తͷਓ΋͍ΔͬΆ͍ ʢόάϋϯλʔʹରͯ͠αʔϏε͕଍Γͯͳ͍ҹ৅ɻͨ ͩ͠ɺΤίγεςϜతʹ͸΋ͪΖΜ෷ͬͨ΄͏͕͍͍ͱ

  25. ӡ༻͢Δ্Ͱͷ஫ҙ఺ ͸ʁ

  26. ʮҰൠతʹ੬ऑ͔ʁʯͰ͸ͳ͘ʮαʔ Ϗεͱͯ͠੬ऑ͔ʁʯΛߟ͑Δ ͨͩ͠ɺӡ༻ͭͭ͠௚ͯ͠ߦ͘ͷ΋͋Γ

  27. ΍ͬͯ͸͍͚ͳ͍͜ͱ ͸ʁ

  28. ੬ऑੑใࠂܦ༝Ͱͷ߈ܸɺඃ֐΋ߟྀ ͢Δ͜ͱ ੬ऑੑͰͳ͍ͱ൑அ͢ΔͳΒɺमਖ਼· Ͱʹ૬खͷฦ౴Λ଴ͭ͜ͱ

  29. ୈࡾऀݕূʹൺ΂ͯ໢ ཏੑ͕௿͍ͷͰ͸ʁ

  30. ػೳతͳ໢ཏੑ͸͔֬ʹ௿͍ ͚Ͳɺ࣌ؒతͳ໢ཏੑ͸ߴ͍

  31. ͜͏͍͏ͱ͜ΖͰ஫໨͞ ΕΔͱ߈ܸ͞ΕΔͷͰ͸ʁ

  32. ͞Εͳͯ͘΋߈ܸ͞ΕͯΔ ίϛϡχέʔγϣϯͰ͖Δϙ ΠϯτΛ༻ҙ͢Δͱߟ͑Δ

  33. ൑அͰ೉͍͠ϙΠϯτ ͸ʁ

  34. ֹۚΛ͍͘Βʹ͢Δ͔͸͔ͳΓ೰ΉϙΠϯτ ͨͩ͠ɺ࠷ऴతʹ͸ʮαʔϏεͱ͍ͯ͘͠Β ʹ͢Δͷ͔ʁʯ࣍ୈͳͷͰɺҰൠతͳֹۚΛ ࢀߟʹͭͭͦ͠ΕͧΕͰܾΊ͍͍ͯ

  35. ӡ༻Ͱ೉͍͠ϙΠϯτ ͸ʁ

  36. ڴҖ౓ͷ௿͍੬ऑੑͱ௨ৗͷ ։ൃλεΫͱͷ݉Ͷ߹͍͕೉ ͍͠

  37. ͕࣌ؒ͋Ε͹

  38. ฐࣾͰ͸bugbountyΛchaos engineeringతʹҐஔ͚ͮͯΔ

  39. ։ൃऀ͸جຊ௚઀bugbounty ͷIssueΛ୲౰͢Δ

  40. ίϯτϩʔϧ͞Εͨ੬ऑੑใࠂΛৗʹ ड͚ଓ͚Δ͜ͱͰɺ੬ऑੑใࠂͷϋϯ υϦϯάεΩϧΛ޲্͍ͤͯ͘͞

  41. Let’s bugbounty!