Casey Ellis, on the record.
1,355 items across 6 categories: press, broadcast, stage, and paperwork. Captured, displayed, and archived for posterity.
Apple Policy on Bugs May Explain Why Hackers Would Help F.B.I.
A New York Times article from March 2016 examines Apple's security bug policies and the incentives that might motivate independent hackers to assist law enforcement. Casey Ellis discusses how responsible disclosure practices and bug bounty programs influence hacker behavior and cooperation with government agencies.
Uber offers hackers treasure map to find computer flaws”
A Reuters article from March 2016 reports on Uber's launch of a bug bounty program that provides hackers with a structured guide to identify security vulnerabilities in its systems. Casey Ellis contributed to the program's development and strategy for crowdsourced security research.
Apple Win in iPhone Case Comes With Cost
A Wall Street Journal article from March 2016 examines Apple's legal victory against the FBI in a dispute over iPhone encryption and data access. The piece analyzes the costs and precedent-setting implications of Apple's win for future privacy and security discussions.
Department of Justice Charges Apple iCloud Hacker
The Department of Justice charged a hacker in connection with the 2014 iCloud celebrity photo leak, according to eWEEK. Casey Ellis commented on the case and its implications for cloud security practices and account protection measures.
Interview: Casey Ellis, Bugcrowd
Infosecurity Magazine published an interview with Casey Ellis of Bugcrowd in March 2016. Ellis discussed the state of the cybersecurity industry and explained how the bug bounty model creates a bridge between security researchers and organizations seeking vulnerability disclosure.
Facebook Exec's Brazilian Misadventure Signals Bigger Problem
A TechNewsWorld article from March 2016 discusses security vulnerabilities and corporate accountability in major technology platforms. Casey Ellis is cited regarding best practices for responsible disclosure and the importance of companies addressing security gaps before they become public incidents.
Bounty for security leaks
An article in Frankfurter Allgemeine Zeitung's Netzwirtschaft blog examines the practice of offering bounties for security vulnerabilities. Casey Ellis is cited for his perspective on how bug bounty programs incentivize researchers to report security flaws responsibly rather than exploit them.
How to hack the Pentagon—legally
Archer Energy Solutions published an article in March 2016 explaining how individuals can legally participate in the Pentagon's official bug bounty program. The piece outlines the process for security researchers to discover and report vulnerabilities to the Department of Defense through authorized channels.
Hack the planet, er, Pentagon: US Dept of Defense puts bounties on bugs
The Register reported on the U.S. Department of Defense's launch of "Hack the Pentagon," its first bug bounty program designed to identify security vulnerabilities. Casey Ellis served as a key advisor to the initiative, helping shape the program's structure and bringing bug bounty expertise to the Pentagon's security efforts.
Risk vs reward: how to talk about bug bounty programs
CSO Online published an article on communicating bug bounty program value to organizational stakeholders. Casey Ellis contributes perspective on balancing security benefits against program costs and risks to help leadership understand implementation decisions.
Bugcrowd CEO Casey Ellis on bug bounty programs
FedScoop published a video interview with Bugcrowd CEO Casey Ellis discussing bug bounty programs in February 2016. Ellis explains how bug bounty initiatives are gaining traction within federal government agencies as a security practice.
Bug bounty hunters score big dollars and the boom's only just begun
The Register published a feature on the growth and mechanics of bug bounty programs in the security industry. Casey Ellis is cited as a key figure in the space, discussing how coordinated vulnerability disclosure and bug bounties have evolved to become significant drivers of application security improvements.
Bugcrowd Outlines Vulnerability Pricing Model, Rewards Vary from $100 to $15,000
Softpedia reports on Bugcrowd's vulnerability pricing model and reward structure for security researchers. Casey Ellis discusses how the platform's bounty amounts range from $100 to $15,000 depending on the severity of reported vulnerabilities.
Bounty hunters won't blink until you dangle US$1500 bug reward
A January 2016 article in The Register examines minimum bug bounty pricing thresholds in the security research community. Casey Ellis is cited on how companies must offer competitive rewards to attract top-tier security researchers to serious vulnerability disclosures.
GM Bug Program Gets Mixed Notices
General Motors' bug bounty program drew mixed reactions from security researchers following its launch. Casey Ellis noted concerns about the program's scope and reward structure, highlighting the need for automakers to align incentives with researcher expectations.
The Ultimate Start-up Guide
The Ultimate Start-up Guide, published by Crowded Ocean in 2016, is a paper resource for entrepreneurs building new ventures. Casey Ellis appears in the guide in connection with BugCrowd, his crowdsourced security testing platform.
Why is hacking so easy and security so hard? - ABC listen
This 2015 broadcast from ABC listen's FutureTense program, reported by Stilgherrian, explores why networks are still hacked on a large scale. Casey Ellis, founder and CEO of Bugcrowd, explains how bug bounty programs invite researchers to find and report vulnerabilities, and says crowds paid for results beat hourly-paid penetration testing.
Bug bounties and pentesting: the Wild West of online security - ABC listen
ABC Listen's Future Tense broadcast, published 28 November 2015, examines bug bounties as a way of fixing internet security flaws. Casey Ellis, founder and CEO of Bugcrowd, says bounties are contests where researchers compete, and that pentesters paid by the hour struggle to compete with crowds paid by results.
Friendly hackers ignored when pointing out bugs
An SF Chronicle article examines the problem of ethical hackers being ignored when they report security vulnerabilities to companies. Casey Ellis discusses the disconnect between security researchers attempting responsible disclosure and organizations that fail to acknowledge or act on their findings.
Oracles security chief posted a crazy ranting tirade. Then Oracle deleted it.
Fortune reported on a controversial blog post by Oracle's security chief criticizing security researchers for identifying bugs in Oracle products. Casey Ellis commented on the incident, offering perspective on responsible disclosure practices and the importance of constructive dialogue between vendors and the security research community.
Security Weekly #438 - Bug Bounty and Responsible Disclosure
Security Weekly #438, an episode of Paul's Security Weekly TV, featured a discussion on bug bounty programs and responsible disclosure practices. Casey Ellis participated in the podcast to examine the mechanics of bug bounties and principles underlying coordinated vulnerability disclosure.
This Week in Enterprise Tech 162 – Matthew Keys and the CFAA
This Week in Enterprise Tech episode 162, broadcast by TWiT.tv on October 19, 2015, examines the Matthew Keys case and the Computer Fraud and Abuse Act. Casey Ellis discusses implications of the CFAA prosecution and its relevance to cybersecurity policy and practice.
This Week in Enterprise Tech 162: Matthew Keys and the CFAA
This Week in Enterprise Tech episode 162, published by TWiT on October 16, 2015, examines the Matthew Keys case and its implications for the Computer Fraud and Abuse Act. Casey Ellis appears on the show to discuss the controversial case and the CFAA's broader legal and technical dimensions.
How building a better hacker accidentally built a better defender
OWASP AppSec California presented a stage talk titled "How building a better hacker accidentally built a better defender" in September 2015. Casey Ellis discusses how developing offensive security skills and mindset inadvertently shaped his approach to defensive work and vulnerability research.
Making your garage door smarter
Ozy.com published a feature on new technology for making garage doors smarter and more connected. Casey Ellis contributed insights on how connected home devices can be secured against emerging threats and vulnerabilities.
THIS WEEK IN ENTERPRISE TECH 158 - BUGCROWD
This Week in Enterprise Tech episode 158, broadcast on TWiT.tv in September 2015, features an in-depth interview with Casey Ellis about Bugcrowd. Ellis discusses the company's approach to crowdsourced security testing and vulnerability disclosure as a method for organizations to identify software risks.
This Week in Enterprise Tech 158: Bugcrowd
This Week in Enterprise Tech broadcast episode 158, published on the show's YouTube channel in September 2015, features an in-depth interview with Casey Ellis. The episode focuses on Bugcrowd's business model and mission within the enterprise security landscape.
Industry Reactions to Oracle CSO Rant: Feedback Friday
SecurityWeek's Feedback Friday column gathered industry responses to a rant by Oracle's Chief Security Officer against security researchers. Casey Ellis contributed perspective on the controversy surrounding responsible disclosure and researcher accountability in the security community.
Government email security woes widen with Pentagon breach and more
A TechTarget article from August 2015 examines widening security vulnerabilities in U.S. government email systems, including a Pentagon breach and related incidents. Casey Ellis is quoted discussing the risks and implications of these email security gaps for federal infrastructure.
A Facebook Intern Exposed a Major Privacy Problem - So They Fired Him
This 2015 Mic article covers Aran Khanna's Marauder's Map, a browser extension that tracked friends through Facebook Message location data. Bugcrowd CEO Casey Ellis told Mic that Facebook would ordinarily welcome such reports, but it enforces its rules when they are violated, and white hats need ground rules to avoid anarchy.