New blog post with @infosec_au: We found a vulnerability in Subaru where an attacker, with just a license plate, could retrieve the full location history, unlock, and start vehicles remotely. The issue was reported and patched. Full post here:

@Bugcrowd @Hacker0x01 Why not hire people like who have seen the struggle of real hunting? Why not hire people who are working day/night for years, These people are Gems, They know what are the real problems and how to overcome them. Hire bug hunters instead of Pentesters, Hire talent instead of certs, Hire those who would love to build the platform. 90% reports goes to N/A because Triagers (Pentesters) couldn't understand it. 5% goes to invalid priorities. 4% goes to no response. 1% goes to accepted because ur lucky that time. There were times when triagers (Bug hunters) help hunters to exploit their submissions to escalate the priority (Bug hunters). vs We don't have time to check your report, Kindly create a video because it takes time to create a new user (Pentesters).