Episode 111 - Jav Is In The Top Four

<p><strong>This Week in InfoSec (08:04)</strong></p><p>With content liberated from the “today in infosec” twitter account and further afield</p><p>8th July 2011: Space Rogue broadcast the final HNNCast. And with that, the Hacker News Network came to an end. Final broadcast: <a href="https://www.facebook.com/78983739181/videos/10150254277486182/">https://www.facebook.com/78983739181/videos/10150254277486182/</a> <br /><a href="https://youtu.be/UdKyDqU1p-4">https://youtu.be/UdKyDqU1p-4</a></p><p>1st July 1979: The first <a href="http://en.wikipedia.org/wiki/Walkman">Sony Walkman</a>, the TPS-L2, goes on sale in Japan. It would go on sale in the US about a year later. By allowing owners to carry their personal music with them, the Walkman and their iconic headphones introduce a revolution in listening habits and popular culture at large.</p><p> </p><p><strong>Rant of the Week (17:12)</strong></p><p><a href="https://www.bleepingcomputer.com/news/security/rogue-hackerone-employee-steals-bug-reports-to-sell-on-the-side/">Rogue HackerOne employee steals bug reports to sell on the side</a></p><p>A HackerOne employee stole vulnerability reports submitted through the bug bounty platform and disclosed them to affected customers to claim financial rewards.</p><p>The rogue worker had contacted about half a dozen HackerOne customers and collected bounties “in a handful of disclosures,” the company said on Friday.</p><p>HackerOne is a platform for coordinating vulnerability disclosures and intermediating monetary rewards for the bug hunter submitting the security reports.</p><p>On June 22, HackerOne responded to a customer request to investigate a suspicious vulnerability disclosure through an off-platform communication channel from someone using the handle “rzlr.”</p><p>The customer had noticed that the same security issue had been previously submitted through HackerOne.</p><p>Bug collisions, where multiple researchers find and report the same security issue, are frequent; in this case, the genuine report and the one from the