u/NebulaElectrical1467

I’m in awe at the insane reputation scores people have on h1…like people who started a few years ago and average 5k+ points a year. How is that possible? even at fulltime hunting, they must be finding hundreds of High/Criticals with exorbitant bounties to reach such score.

Is there a meta or some tactic to farming reputation that these guys are privy to (collabs, OP recon/first to discover new targets, 0day research…)? or are they just that productive?

It looks like every hunter with a decent hackerone reputation and sizeable X following is now affiliated with or shilling for some kind of AI bug bounty hackbot product that allegedly keeps finding Crits for them with little manual effort from their end. There are even courses being offered that walk you through building and running your own bot for constantly hunting for bugs. Is this all marketing fluff or do these products have an actual moat/edge over having a very good automation pipeline?

Are these bots a race to the bottom or is there a true competitive advantage to having your own? if you have had successful one that’s truly autonomous and productive, how do you deal with false positives and potential dupes?

30M novice here who started following along the Essential Elements book 1 on my own. Been practicing almost every other day for 4 months now so I’m familiar with the instrument and reading music notation.

Looking for an experienced teacher who can help me evaluate my playing over Zoom and give me targeted advice specific to my weaknesses..etc and get me to a point where I can play at a community/local band.

My DMs are open.

Anyone here taken any of their courses and can vouch for the quality and depth?

Eyeing the hackbots course which is supposed to teach you how to build AI agents for scaling BB hunting with Claude Code. It’s $1k so not cheap but not expensive (ie SANS expensive). I’d also like to know if the knowledge is readily available and curated in a github repo somewhere to save myself $1k.

Anyone done this transition? what companies would find my experience most relevant?

Any art or phrase you found personally compelling that you’d get as a tattoo?

The first cipher might be cool or maybe an artistic rendering of one of the crew’s names (i really liked holocene).

Mine is:

h1_analyst_andrew (professional, communicates well, puts in the effort to understand complex reports).

[ Removed by Reddit on account of violating the content policy. ]

Multiple High severity findings left in ‘New’ status for months with nothing but the initial bot response.

Triager using bullshit nonsensical reasons to reduce severity.

Claiming duplicate Critical bug and never sharing or adding me to the original report. Refuse to comment when pressed for it.

In short they’re turned into Microsoft. Won’t be surprised if they announce shutting down their h1 program and accepting reports only through MSRC (and we all know how they operate).