Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
今日から始めるbugbounty
Search
kyo_ago
July 23, 2018
Programming
0
290
今日から始めるbugbounty
kyo_ago
July 23, 2018
Tweet
Share
More Decks by kyo_ago
See All by kyo_ago
フロントエンドの リソース管理の話 TechFeed Summit#1 #techfeed #techfeedsummit
kyo_ago
5
2k
TypeScriptでType Match的なことをする話 #すえなみチャンス暑気払い
kyo_ago
1
1.3k
WebReplayから見るWeb開発の未来 #builderscon
kyo_ago
2
980
karmaを使ったSPA向けE2Eテスト技法
kyo_ago
6
5.6k
E2Eという名称の指すもの
kyo_ago
0
2.5k
How to use Scala.js in real world?
kyo_ago
1
2.1k
Other Decks in Programming
See All in Programming
ネストしたdata classの面倒な更新にさようなら!Lensを作って理解するArrowのOpticsの世界
shiita0903
1
250
AI Agent 時代的開發者生存指南
eddie
4
2.3k
Blazing Fast UI Development with Compose Hot Reload (droidcon London 2025)
zsmb
0
450
三者三様 宣言的UI
kkagurazaka
0
340
Vue 3.6 時代のリアクティビティ最前線 〜Vapor/alien-signals の実践とパフォーマンス最適化〜
hiranuma
2
370
The Past, Present, and Future of Enterprise Java
ivargrimstad
0
500
Dive into Triton Internals
appleparan
0
420
AkarengaLT vol.38
hashimoto_kei
1
130
CSC305 Lecture 10
javiergs
PRO
0
330
Kotlinで実装するCPU/GPU 「協調的」パフォーマンス管理
matuyuhi
0
260
Developer Joy - The New Paradigm
hollycummins
1
400
開発組織の戦略的な役割と 設計スキル向上の効果
masuda220
PRO
10
2k
Featured
See All Featured
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
31
9.7k
RailsConf 2023
tenderlove
30
1.3k
Fireside Chat
paigeccino
41
3.7k
The World Runs on Bad Software
bkeepers
PRO
72
11k
For a Future-Friendly Web
brad_frost
180
10k
Thoughts on Productivity
jonyablonski
72
4.9k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
35
3.2k
Building a Modern Day E-commerce SEO Strategy
aleyda
44
8k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
34
2.5k
Leading Effective Engineering Teams in the AI Era
addyosmani
8
720
Building Flexible Design Systems
yeseniaperezcruz
329
39k
BBQ
matthewcrist
89
9.9k
Transcript
ࠓ͔Β࢝ΊΔ bugbounty
༰ •bugbountyͱ •bugbountyͷར •bugbountyͷҙ •bugbountyͷ࢝Ίํ •bugbountyͷӡ༻ •FAQ •͕࣌ؒ͋Ε
bugbountyͱ
bugbountyͱ • ͍ΘΏΔʮ੬ऑੑใࠂʹର͢Δใ੍ۚʯ • ੬ऑੑใΛड͚͚ɺͦͷใʹର͓ͯۚ͠Λ͏
bugbountyͱ • ւ֎Ͱ͔ͳΓҰൠతʢMicrosoftɺGoogleɺFacebookɺ MozillaɺUberɺAppleɺAdobeɺͦͷଞࢥ͍ͭ͘اۀͩ ͍͍ͨɻAmazonͬͯͳ͍͔ʁʣ • ࠃͰαΠϘζ͞ΜɺLINE͞ΜɺϐΫγϒ͞Μɺ Zaim͞ΜɺChatWork͕࣮ࢪ
bugbountyͷར
bugbountyͷར • αʔϏεଆͰίϯτϩʔϧ͕Ͱ͖Δ ίετɺظؒɺنΛαʔϏεଆͰίϯτϩʔϧ͢Δ͜ͱ ͕Ͱ͖Δ • අ༻0ʙແݶ • ظؒࠓ͔Β͍ͭ·ͰͰ •
ن୯Ұͷػೳ͔ΒαʔϏεશମ·Ͱ
bugbountyͷҙ
bugbountyͷҙ • ϗϫΠτϦετܗࣜͰͷνΣοΫͷΘΓͰͳ͍ ͋͘·Ͱิؔɻͨͩ͠ɺิؔͱͯ͠ඇৗʹ૬ੑ͕͍͍ • ʢҰൠతʹʮୈࡾऀػؔͷݕূʯͱͯ͠ड͚ೖΕΒΕͳ͍ͱࢥ͏ʣ • ඇެ։ঢ়ଶͰͷࣄલݕূͰ͖ͳ͍ ࣄલݕূͱͯ͠ެ։͢Δ͜ͱͰ͖Δ͚Ͳɺશඇެ։ʹͰ͖ͳ ͍
• Τϥʔϩάେྔʹ૿͑Δ ՄೳͰ͋Εઐ༻ڥΛ༻ҙͨ͠΄͏͕͍͍
bugbountyͷ࢝Ίํ
bugbountyͷ࢝Ίํ • ࣾௐ • ઌʹ͍ͱ͜ΖΛͬ͘͟Γચͬͯमਖ਼͢Δ
bugbountyͷ࢝Ίํ • ੬ऑੑड༻ͷϑΥʔϜΛ࡞Δ ઌʹࣾମ੍Λߏங͢ΔͨΊ • ϓϥοτϑΥʔϜʹΔ hackeroneɺbugbounty.jp
bugbountyͷӡ༻
bugbountyͷӡ༻ • ใࠂ͞Εͨ༰ͷτϥοΩϯά ϓϥοτϑΥʔϜʹͬͯ੬ऑੑใͷमਖ਼τϥοΩϯ ά·Ͱߦ͑ͳ͍ɻ ࣾBTSͱඥ͚ͯͷཧͰ͖ͳ͍ɻ खಈͰؤுΔ͔ɺͳΜΒ͔ͷΈ͕ඞཁ
bugbountyͷӡ༻ • ӡӦϝϯόʔͰͲ͜·ͰΧόʔ͢Δ͔ʁ ใڞ༗ͷൣғ ػೳ։ൃͱ੬ऑੑमਖ਼ͷ༏ઌͷ݉Ͷ߹͍ • ʢ͜ͷลɺ֤ࣾʹฉ͍ͯͦΕͧΕಠࣗͬΆ͍ͷͰϊϋ ͕͋ΔͬΆ͍ʣ
FAQ
͍͘Β͔͔Δʁ
ແྉͰ։࢝Մೳ ஈ֊తʹֹۚΛ্͍͚͍͍͛ͯ ֤͕͍ࣾ͘Β͙Β͍͔͚ͯΔ͔ެ։ ใ͔ΒਪଌՄೳ
੬ऑੑͬͯΑ͘Θ͔Β ͳ͍Μ͚ͩͲɻɻɻ
ࣝͳ͠Ͱग़དྷͳ͘ͳ͍ bugbounty.jpͳΒτϦΞʔδ Φϓγϣϯ͋Γ
Ͳͷ͘Β͍ใࠂ͕དྷΔʁ
ใֹۚͱαʔϏε࣍ୈ ใࠂ͕ଟ͗͢Δ߹ετοϓ͋Γ ֤ࣾͷެ։ใΛݟΔͱେମΘ͔Δ
ແྉͩͱใࠂདྷͳ͍ͷ Ͱʁ
ݱঢ়ಛʹࠃʹؔͯ͠ແྉͰ݁ߏདྷΔ ࢼ͠తͳਓͱ͔ɺϙΠϯτతͷਓ͍ΔͬΆ͍ ʢόάϋϯλʔʹରͯ͠αʔϏε͕Γͯͳ͍ҹɻͨ ͩ͠ɺΤίγεςϜతʹͪΖΜͬͨ΄͏͕͍͍ͱ
ӡ༻͢Δ্Ͱͷҙ ʁ
ʮҰൠతʹ੬ऑ͔ʁʯͰͳ͘ʮαʔ Ϗεͱͯ͠੬ऑ͔ʁʯΛߟ͑Δ ͨͩ͠ɺӡ༻ͭͭͯ͠͠ߦ͘ͷ͋Γ
͍͚ͬͯͳ͍͜ͱ ʁ
੬ऑੑใࠂܦ༝Ͱͷ߈ܸɺඃߟྀ ͢Δ͜ͱ ੬ऑੑͰͳ͍ͱஅ͢ΔͳΒɺमਖ਼· Ͱʹ૬खͷฦΛͭ͜ͱ
ୈࡾऀݕূʹൺͯ ཏੑ͕͍ͷͰʁ
ػೳతͳཏੑ͔֬ʹ͍ ͚Ͳɺ࣌ؒతͳཏੑߴ͍
͜͏͍͏ͱ͜ΖͰ͞ ΕΔͱ߈ܸ͞ΕΔͷͰʁ
͞Εͳͯ͘߈ܸ͞ΕͯΔ ίϛϡχέʔγϣϯͰ͖Δϙ ΠϯτΛ༻ҙ͢Δͱߟ͑Δ
அͰ͍͠ϙΠϯτ ʁ
ֹۚΛ͍͘Βʹ͢Δ͔͔ͳΓΉϙΠϯτ ͨͩ͠ɺ࠷ऴతʹʮαʔϏεͱ͍ͯ͘͠Β ʹ͢Δͷ͔ʁʯ࣍ୈͳͷͰɺҰൠతͳֹۚΛ ࢀߟʹͭͭͦ͠ΕͧΕͰܾΊ͍͍ͯ
ӡ༻Ͱ͍͠ϙΠϯτ ʁ
ڴҖͷ͍੬ऑੑͱ௨ৗͷ ։ൃλεΫͱͷ݉Ͷ߹͍͕ ͍͠
͕࣌ؒ͋Ε
ฐࣾͰbugbountyΛchaos engineeringతʹҐஔ͚ͮͯΔ
։ൃऀجຊbugbounty ͷIssueΛ୲͢Δ
ίϯτϩʔϧ͞Εͨ੬ऑੑใࠂΛৗʹ ड͚ଓ͚Δ͜ͱͰɺ੬ऑੑใࠂͷϋϯ υϦϯάεΩϧΛ্͍ͤͯ͘͞
Let’s bugbounty!