Finally got around to doing a write-up: Breaking GitHub Private Pages for $35k This was my first and biggest bounty. Found with Philip on HackerOne :) #togetherwehitharder robertchen.cc/blog/2021/04/0…

Security: Full CSP bypass through filesystem URIs (reward: $5000) crbug.com/1117687

Security: Full CSP bypass through blob: URIs (reward: $5000) crbug.com/1115628

💰 $524,250 in bounties awarded ⚡ More private bounties 🐞 A few favorite bugs Check out what our bug bounty program has been up to as we help secure GitHub! github.blog/2021-06-25-sev…

found some pretty cool vulnerabilities with Philip, we’ll be doing a more in depth writeup soon-ish

Writeup of some cool vulnerabilities in NPM I found with Philip: robertchen.cc/blog/2021/09/2…

Happy first day of Cybersecurity Awareness Month! Check out a spotlight on two of our Bug Bounty researchers. github.blog/2021-10-01-cyb…

Congrats to strellic & Philip as well! It's the 4th intended solution so far. x.com/ndevtk/status/…

We publicly released our exploits for CVE-2022-0185 at github.com/Crusaders-of-R… and a public writeup at willsroot.io/2022/01/cve-20…. Thanks once again to FizzBuzz101, Jamie Hill-Daniel , ryaagard , Day , Philip , and Alec Petridis .

Congrats to redpwnCTF and Philip for getting first blood!

⚡️⚡️⚡️ Excited to welcome Philip to the team. ⚡️⚡️⚡️

🥁...drumroll please...🥁 After three days of intense competition, we’re proud to crown Dicegang as the champions of Capture The Flag. 2nd place: Bingus 3rd place: NU1L 4th place: GUPER SUESSER 5th place: Organizers Congratulations to all participants—you’ve showcased the

Excited for the launch of Devin 2.0!

Cognition has signed a definitive agreement to acquire Windsurf. The acquisition includes Windsurf’s IP, product, trademark and brand, and strong business. Above all, it includes Windsurf’s world-class people, whom we’re privileged to welcome to our team. We are also honoring