Episode 162: HackerOne Training AI on Bug Bounty Data?

Episode 162: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph sit down with HackerOne Founder & CTO Alex Rice to discuss concerns of Using Hacker Data for AI and decreasing bounties.

Follow us on twitter at: x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout toYTCracker (twitter.com/realytcracker) for the awesome intro music!

====== Links ======
Follow your hosts Rhynorater, rez0 and gr3pme on X:
x.com/Rhynorater
x.com/rez0__
x.com/gr3pme

Critical Research Lab:
lab.ctbb.show

====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at ctbb.show/merch!

Sponsored by ThreatLocker – Join Justin at Zero Trust World in March and get $200 off registration with Code ZTWCTBB26
ztw.com

Today’s Guest: x.com/senorarroz

====== This Week in Bug Bounty ======

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities
yeswehack.com/learn-bug-bounty/xml-external-en…

Bug Bounty Maturity Framework
bugbountymaturity.com

====== Resources ======
Confidential Information and Confidentiality Obligations
hackerone.com/terms/general#:~:text=HackerOne%…)%20provided%20such%20use%20does%20not%20result%20in%20disclosure%20of%20Confidential%20Information%20to%20unauthorized%20third%20parties

Ownership and Licenses
hackerone.com/terms/community#:~:text=8.%20Own…

I argued with an AI regarding HackerOne using Hacker reports to train PtaaS
bugbounty.forum/post/183ff0fc-eb9e-47f8-991d-c…

HackerOne PTaaS (likely training their AI on private reports data)
reddit.com/r/bugbounty/comments/1r5hixk/hacker…

What Makes Agentic PTaaS Different in Real Environments
hackerone.com/blog/agentic-penetration-testing…

====== Timestamps ======
(00:00:00) Introduction
(00:08:44) HackerOne AI Terms of Service
(00:24:56) Agentic PTaaS
(00:38:09) Selling data
(00:43:49) Decrease in Bounties