logo
episode-header-image
May 2024
1h 45m

Episode 71: More VDP Chats & AI Bias Bou...

Justin Gardner (Rhynorater) & Joseph Thacker (Rez0)
About this episode

Episode 71: In this episode of Critical Thinking - Bug Bounty Podcast Keith Hoodlet joins us to weigh in on the VDP Debate. He shares some of his insights on when VDPs are appropriate in a company's security posture, and the challenges of securing large organizations. Then we switch gears and talk about AI bias bounties, where Keith explains the approach he takes to identify bias in chatbots and highlights the importance of understanding human biases and heuristics to better hack AI.

Follow us on twitter at: @ctbbpodcast

We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker for the awesome intro music!

------ Links ------

Follow your hosts Rhynorater & Teknogeek on twitter:

https://twitter.com/0xteknogeek

https://twitter.com/rhynorater

------ Ways to Support CTBBPodcast ------

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

Sign up for Caido using the referral code CTBBPODCAST for a 10% discount.

Today's Sponsor - Project Discovery: https://nux.gg/podcast

Today’s guest: Keith Hoodlet

https://securing.dev/

Resources:

Daniel Miessler's article about the security poverty line

https://danielmiessler.com/p/the-cybersecurity-skills-gap-is-another-instance-of-late-stage-capitalism/

Hacking AI Bias

https://securing.dev/posts/hacking-ai-bias/

Hacking AI Bias Video

https://youtu.be/AeFZA7xGIbE?si=TLQ7B3YtzPWXS4hq

Sarah's Hoodlet's new book

https://sarahjhoodlet.com

Link to Amazon Page

https://a.co/d/c0LTM8U

Timestamps:

(00:00:00) Introduction

(00:04:09) Keith's Appsec Journey

(00:16:24) The Great VDP Debate Redux

(00:47:18) Platform/Hunter Incentives and Government Regulation

(01:06:24) AI Bias Bounties

(01:26:27) AI Techniques and Bugcrowd Contest

Up next
Nov 20
Episode 149: DEFCON Debrief: AI Vulns, Unicode Weirdness, and Wild Vulnerability Chains
<p>Episode 149: In this episode of Critical Thinking - Bug Bounty Podcast The DEFCON videos are up, and Justin and Joseph talk through some of their favorites.</p><p>Follow us on <a target="_blank" rel="noopener noreferrer nofollow" href="https://x.com/ctbbpodcast">X</a></p><p>Go ... Show More
1h 2m
Nov 13
Episode 148: MCP Hacking Guide
Episode 148: In this episode of Critical Thinking - Bug Bounty Podcast Justin gives us a crash course on Model Context Protocol.Follow us on twitter at: https://x.com/ctbbpodcastGot any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io ... Show More
32m 26s
Nov 6
Episode 147: Stupid Simple Hacking Workflow Tips
Episode 147: In this episode of Critical Thinking - Bug Bounty Podcast we're talking tips and tricks that help us in hacking that we really should’ve learned sooner.Follow us on twitter at: https://x.com/ctbbpodcastGot any ideas and suggestions? Feel free to send us any feedback ... Show More
58m 48s
Recommended Episodes
Mar 2023
Acquired’s Ben Gilbert & David Rosenthal on private markets, ZIRP impact, future of Amazon | E1706
<p><strong>Acquired co-hosts Ben and David are BACK to discuss the state of the VC market and YC shutting down its Continuity Fund (6:20) before diving into industries that benefitted from ZIRP (26:35). They also break down which social apps they want to own and why (45:29). Then ... Show More
1h 31m
Feb 2024
Google DeepMind C.E.O. Demis Hassabis on the Path From Chatbots to A.G.I.
<p>This week’s episode is a conversation with Demis Hassabis, the head of Google’s artificial intelligence division. We talk about Google’s latest A.I. models, Gemini and Gemma; the existential risks of artificial intelligence; his timelines for artificial general intelligence; a ... Show More
56m 37s
Feb 2024
E167: Nvidia smashes earnings (again), Google's Woke AI disaster, Groq's LPU breakthrough & more
(0:00) Bestie intros: Banana boat! (2:34) Nvidia smashes expectations again: understanding its terminal value and bull/bear cases in the context of the history of the internet (27:26) Groq's big week, training vs. inference, LPUs vs. GPUs, how to succeed in deep tech (49:37) Goog ... Show More
1h 20m
Feb 2024
Refried Beans | Putin’s War of Choice (feat. Rachel Vindman) | Originally Posted 2/25/2022
<p>Friday, February 25th, 2022</p><p>Biden and NATO impose additional sanctions on Russia as Putin initiates a full-scale invasion of Ukraine; we have additional insights into Manhattan DA Alvin Bragg’s reluctance to prosecute Donald; the “Don't Say Gay” bill has passed the Flori ... Show More
43m 42s
Feb 2024
TIP609: Fooled by Randomness by Nassim Taleb
On today’s episode, Clay reviews Nassim Taleb’s book – Fooled by Randomness. Nassim Taleb is a Lebanon-born American mathematician and statistician whose work concerns problems of randomness, probability, and uncertainty. He’s very well known for his popular books, including The ... Show More
1 h
Nov 2023
Sports Podcasting On A National Level
“Think of our NFL network, it’s 38 podcasts. To source 38 podcasts, you don’t want eight different publishers and 38 different onboarding calls and invoices - it can be a nightmare. So for us, we like to just make it as easy for an advertiser as possible to activate with those mi ... Show More
44m 24s
Feb 2024
Nationwide Cyber Attack? Cell Service Outages Reported Across U.S | PBD Podcast | Ep. 369
<p>Patrick Bet-David, Adam Sosnick, Tom Ellsworth, and Vincent Oshana discuss whether nationwide cell outages in the U.S are the result of tech failure or a cyber attack, non-U.S. citizen Kelly Wong being appointed by the San Francisco&#39;s Board of Supervisors to city&#39;s Ele ... Show More
2h 22m
Feb 2024
Out Of Koch Money
<p>Tuesday, February 27th, 2024</p><p>Today, Ken Chesebro concealed secret Twitter account communications from Michigan prosecutors; Manhattan DA Alvin Bragg has asked for a gag order in the upcoming election interference hush money trial of Donald Trump; Russia tied hackers issu ... Show More
38m 13s
Apr 2023
The secret gamblers using AI to hack horse racing
This week, we go to a racetrack in Miami, Florida to drink some beers, place some bets, and discover how AI is changing the sport of horse racing. FT data journalist Oliver Roeder joins Lilah to talk about how the ancient sport is being upended by anonymous computer-assisted bets ... Show More
23m 21s