Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
今日から始めるbugbounty
Search
kyo_ago
July 23, 2018
Programming
0
260
今日から始めるbugbounty
kyo_ago
July 23, 2018
Tweet
Share
More Decks by kyo_ago
See All by kyo_ago
フロントエンドの リソース管理の話 TechFeed Summit#1 #techfeed #techfeedsummit
kyo_ago
5
1.9k
TypeScriptでType Match的なことをする話 #すえなみチャンス暑気払い
kyo_ago
1
1.2k
WebReplayから見るWeb開発の未来 #builderscon
kyo_ago
2
910
karmaを使ったSPA向けE2Eテスト技法
kyo_ago
6
5.4k
E2Eという名称の指すもの
kyo_ago
0
2.4k
How to use Scala.js in real world?
kyo_ago
1
2k
Other Decks in Programming
See All in Programming
Realtime API 入門
riofujimon
0
150
よくできたテンプレート言語として TypeScript + JSX を利用する試み / Using TypeScript + JSX outside of Web Frontend #TSKaigiKansai
izumin5210
6
1.7k
Better Code Design in PHP
afilina
PRO
0
130
Flutterを言い訳にしない!アプリの使い心地改善テクニック5選🔥
kno3a87
1
200
as(型アサーション)を書く前にできること
marokanatani
10
2.7k
Why Jakarta EE Matters to Spring - and Vice Versa
ivargrimstad
0
1.2k
CSC509 Lecture 12
javiergs
PRO
0
160
Kaigi on Rails 2024 〜運営の裏側〜
krpk1900
1
240
Figma Dev Modeで変わる!Flutterの開発体験
watanave
0
150
Jakarta EE meets AI
ivargrimstad
0
150
Quine, Polyglot, 良いコード
qnighy
4
650
AI時代におけるSRE、 あるいはエンジニアの生存戦略
pyama86
6
1.2k
Featured
See All Featured
Agile that works and the tools we love
rasmusluckow
327
21k
A Tale of Four Properties
chriscoyier
156
23k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
226
22k
Rebuilding a faster, lazier Slack
samanthasiow
79
8.7k
Gamification - CAS2011
davidbonilla
80
5k
How GitHub (no longer) Works
holman
310
140k
Being A Developer After 40
akosma
87
590k
The Pragmatic Product Professional
lauravandoore
31
6.3k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
232
17k
Code Review Best Practice
trishagee
64
17k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
tammyeverts
47
2.1k
A designer walks into a library…
pauljervisheath
204
24k
Transcript
ࠓ͔Β࢝ΊΔ bugbounty
༰ •bugbountyͱ •bugbountyͷར •bugbountyͷҙ •bugbountyͷ࢝Ίํ •bugbountyͷӡ༻ •FAQ •͕࣌ؒ͋Ε
bugbountyͱ
bugbountyͱ • ͍ΘΏΔʮ੬ऑੑใࠂʹର͢Δใ੍ۚʯ • ੬ऑੑใΛड͚͚ɺͦͷใʹର͓ͯۚ͠Λ͏
bugbountyͱ • ւ֎Ͱ͔ͳΓҰൠతʢMicrosoftɺGoogleɺFacebookɺ MozillaɺUberɺAppleɺAdobeɺͦͷଞࢥ͍ͭ͘اۀͩ ͍͍ͨɻAmazonͬͯͳ͍͔ʁʣ • ࠃͰαΠϘζ͞ΜɺLINE͞ΜɺϐΫγϒ͞Μɺ Zaim͞ΜɺChatWork͕࣮ࢪ
bugbountyͷར
bugbountyͷར • αʔϏεଆͰίϯτϩʔϧ͕Ͱ͖Δ ίετɺظؒɺنΛαʔϏεଆͰίϯτϩʔϧ͢Δ͜ͱ ͕Ͱ͖Δ • අ༻0ʙແݶ • ظؒࠓ͔Β͍ͭ·ͰͰ •
ن୯Ұͷػೳ͔ΒαʔϏεશମ·Ͱ
bugbountyͷҙ
bugbountyͷҙ • ϗϫΠτϦετܗࣜͰͷνΣοΫͷΘΓͰͳ͍ ͋͘·Ͱิؔɻͨͩ͠ɺิؔͱͯ͠ඇৗʹ૬ੑ͕͍͍ • ʢҰൠతʹʮୈࡾऀػؔͷݕূʯͱͯ͠ड͚ೖΕΒΕͳ͍ͱࢥ͏ʣ • ඇެ։ঢ়ଶͰͷࣄલݕূͰ͖ͳ͍ ࣄલݕূͱͯ͠ެ։͢Δ͜ͱͰ͖Δ͚Ͳɺશඇެ։ʹͰ͖ͳ ͍
• Τϥʔϩάେྔʹ૿͑Δ ՄೳͰ͋Εઐ༻ڥΛ༻ҙͨ͠΄͏͕͍͍
bugbountyͷ࢝Ίํ
bugbountyͷ࢝Ίํ • ࣾௐ • ઌʹ͍ͱ͜ΖΛͬ͘͟Γચͬͯमਖ਼͢Δ
bugbountyͷ࢝Ίํ • ੬ऑੑड༻ͷϑΥʔϜΛ࡞Δ ઌʹࣾମ੍Λߏங͢ΔͨΊ • ϓϥοτϑΥʔϜʹΔ hackeroneɺbugbounty.jp
bugbountyͷӡ༻
bugbountyͷӡ༻ • ใࠂ͞Εͨ༰ͷτϥοΩϯά ϓϥοτϑΥʔϜʹͬͯ੬ऑੑใͷमਖ਼τϥοΩϯ ά·Ͱߦ͑ͳ͍ɻ ࣾBTSͱඥ͚ͯͷཧͰ͖ͳ͍ɻ खಈͰؤுΔ͔ɺͳΜΒ͔ͷΈ͕ඞཁ
bugbountyͷӡ༻ • ӡӦϝϯόʔͰͲ͜·ͰΧόʔ͢Δ͔ʁ ใڞ༗ͷൣғ ػೳ։ൃͱ੬ऑੑमਖ਼ͷ༏ઌͷ݉Ͷ߹͍ • ʢ͜ͷลɺ֤ࣾʹฉ͍ͯͦΕͧΕಠࣗͬΆ͍ͷͰϊϋ ͕͋ΔͬΆ͍ʣ
FAQ
͍͘Β͔͔Δʁ
ແྉͰ։࢝Մೳ ஈ֊తʹֹۚΛ্͍͚͍͍͛ͯ ֤͕͍ࣾ͘Β͙Β͍͔͚ͯΔ͔ެ։ ใ͔ΒਪଌՄೳ
੬ऑੑͬͯΑ͘Θ͔Β ͳ͍Μ͚ͩͲɻɻɻ
ࣝͳ͠Ͱग़དྷͳ͘ͳ͍ bugbounty.jpͳΒτϦΞʔδ Φϓγϣϯ͋Γ
Ͳͷ͘Β͍ใࠂ͕དྷΔʁ
ใֹۚͱαʔϏε࣍ୈ ใࠂ͕ଟ͗͢Δ߹ετοϓ͋Γ ֤ࣾͷެ։ใΛݟΔͱେମΘ͔Δ
ແྉͩͱใࠂདྷͳ͍ͷ Ͱʁ
ݱঢ়ಛʹࠃʹؔͯ͠ແྉͰ݁ߏདྷΔ ࢼ͠తͳਓͱ͔ɺϙΠϯτతͷਓ͍ΔͬΆ͍ ʢόάϋϯλʔʹରͯ͠αʔϏε͕Γͯͳ͍ҹɻͨ ͩ͠ɺΤίγεςϜతʹͪΖΜͬͨ΄͏͕͍͍ͱ
ӡ༻͢Δ্Ͱͷҙ ʁ
ʮҰൠతʹ੬ऑ͔ʁʯͰͳ͘ʮαʔ Ϗεͱͯ͠੬ऑ͔ʁʯΛߟ͑Δ ͨͩ͠ɺӡ༻ͭͭͯ͠͠ߦ͘ͷ͋Γ
͍͚ͬͯͳ͍͜ͱ ʁ
੬ऑੑใࠂܦ༝Ͱͷ߈ܸɺඃߟྀ ͢Δ͜ͱ ੬ऑੑͰͳ͍ͱஅ͢ΔͳΒɺमਖ਼· Ͱʹ૬खͷฦΛͭ͜ͱ
ୈࡾऀݕূʹൺͯ ཏੑ͕͍ͷͰʁ
ػೳతͳཏੑ͔֬ʹ͍ ͚Ͳɺ࣌ؒతͳཏੑߴ͍
͜͏͍͏ͱ͜ΖͰ͞ ΕΔͱ߈ܸ͞ΕΔͷͰʁ
͞Εͳͯ͘߈ܸ͞ΕͯΔ ίϛϡχέʔγϣϯͰ͖Δϙ ΠϯτΛ༻ҙ͢Δͱߟ͑Δ
அͰ͍͠ϙΠϯτ ʁ
ֹۚΛ͍͘Βʹ͢Δ͔͔ͳΓΉϙΠϯτ ͨͩ͠ɺ࠷ऴతʹʮαʔϏεͱ͍ͯ͘͠Β ʹ͢Δͷ͔ʁʯ࣍ୈͳͷͰɺҰൠతͳֹۚΛ ࢀߟʹͭͭͦ͠ΕͧΕͰܾΊ͍͍ͯ
ӡ༻Ͱ͍͠ϙΠϯτ ʁ
ڴҖͷ͍੬ऑੑͱ௨ৗͷ ։ൃλεΫͱͷ݉Ͷ߹͍͕ ͍͠
͕࣌ؒ͋Ε
ฐࣾͰbugbountyΛchaos engineeringతʹҐஔ͚ͮͯΔ
։ൃऀجຊbugbounty ͷIssueΛ୲͢Δ
ίϯτϩʔϧ͞Εͨ੬ऑੑใࠂΛৗʹ ड͚ଓ͚Δ͜ͱͰɺ੬ऑੑใࠂͷϋϯ υϦϯάεΩϧΛ্͍ͤͯ͘͞
Let’s bugbounty!