Hello everybody!

Your least favorite 0.1x engineer here!

So lately as a lot of people have seen, bug bounties on bugcrowd have gotten significantly worse.

So I did an experiment yesterday that basically baits a triager if they don't read the report.

My focus is on firmware, binary exploitation and such and has been for a long time. I buy ALOT of IoT stuff and reverse it and have been for quite a long time now.

So most of my programs are in that area.

Now, the story starts with me realizing that a few months ago I found a vulnerability in a companies product and I also discovered that I am the only person to EVER find a CVE in that product (seriously underfarmed).

I spent the week working it out and found quite a few issues (mostly P3, one potential P2, no P1's) with that specific device.…