baby boi. tweets: eng/tr
Somewhere between galaxies.
Joined December 2022
- Tweets749
- Following477
- Followers628
- Likes3K
You dashboard people got to me. I’ll probably end up spending tonight finishing a dashboard for my AI hunting harness/workflow/whatever we’re calling it these days instead of sleeping. :D
4
155
It’s not all duplicates though. :) There are still some nice things happening in between, and seeing a few P1s sitting in triage definitely helps with the pain. #BugBounty
2
85
1,748
I don’t think we give Grok enough credit sometimes. It genuinely does some really impressive work. ^^
145
Ouch...
*sshole is out
if you run sshd on alpine, openwrt or any musl box with password auth on: update now
official writeup: sshhole.com
2
410
I’m finally trying WoW for the first time. I’ve played a ridiculous number of MMORPGs over the years, so somehow starting WoW only now feels kind of funny.
Pretty excited though. Any advice for a first-time player?
169
Today was supposed to be cardio day, but I chose assembling a wardrobe over going to the gym. Honestly, I think I burned more energy doing that than I would have walking. :D
1
213
My goal for this month is 200 bug reports. Last month I think I reported around 70 vulnerabilities with roughly 85% accuracy. If I can somehow hit 200 this month and keep the accuracy around 90%, things could get very interesting. :) #bugbounty
This month started with duplicates. The two that hurt the most were both P1s. I actually had fun finding them and writing the reports, so seeing them end up as duplicates is a bit painful. Still, I’m happy that I’m finding valid bugs. That part matters more to me. #BugBounty #bugcrowd
5
578
I think the mortar system should be made a bit more manual.
Ideally, it should require two people: one person firing while the other reloads. I’d also consider adding a short delay or timing mechanic between shots instead of allowing constant back-to-back fire.
I think that would make the system feel more fair, more tactical, and more structured.
I’ve been meaning to write this for a few days but only just got the chance. Hope you see this. @BULKHEAD @WARDOGS
1
170
I’d been mentally preparing myself to go to the gym since this morning. Then I thought, “I’ll just report 5 bugs first and go.” Somehow I ended up reporting 14 and never made it to the gym. Productive enough to feel accomplished, guilty enough to still feel bad about it.
6
207
Every day I tell myself I’ll get to the gym early. Every day I’m late. But hey, at least I’ve finally started going consistently. That counts for something, right?
4
239
10 duplicates in the last two days. 2 P1s, 2 P2s, 5 P3s and 1 P4.
Quite a way to spend 48 hours. :)
#bugbounty #bugcrowd #appsec
4
51
2,125
It still hurts, obviously.
But at some point I also have to admit that I’m genuinely happy I’m finding valid issues again.
I came back to bug bounty at the very end of November 2025, and looking at how far I’ve come since then feels good.
Still a lot to improve, but at least now I can actually see the progress.
1
299
Nişanlımla dalga geçmek için whatsapp’ta attığı bir mesajı GPT ile paylaşıp “nişanlımla dalga geçmem lazım, şu mesaj için komik bir görsel lazım.” diyerek verdiğim mesaja yaptığı görsele bakın, gülmekten karnım ağrıdı:
🤖 Made with AI
1
1
250
This week has been pretty funny. Sometimes the vulnerability is valid, the scenario is real, and somehow the other side still decides that it simply “can’t happen” and closes it as NA. At this point, instead of arguing, I usually just ask:
“Would you at least consider Informative?”
Not because I care about the reward, but because I don’t want my accuracy ratio taking unnecessary hits for reports that are technically valid. Of course, sometimes a finding genuinely doesn’t apply because of the way the infrastructure or product is designed. That’s exactly why I try to read and understand the docs properly before reporting anything.
Still… some of these NA decisions are very interesting. :)
#bugbounty #appsec
2
378