Searching Outside the Streetlight
summary
TrustToken describes a hands‑on workflow: run audits, formal verification and bug bounties in parallel against one commit, inject bugs and hash them so auditors can’t claim post hoc finds, and use capture‑recapture estimators to quantify missing issues. A Chapman/Lincoln‑Peterson style estimate puts total bugs at ~23 when 21 are found; formal verification catches 17, auditor A finds 8 (3 overlap injected), auditor B finds 1, bounty program performs poorly. Concrete outcome is replacing auditor B, reworking the bounty, and pausing releases until estimated residual bugs drop, capture‑recapture (Chapman, Lincoln‑Petersen).
AI-written summary · about
chapters (4)
related talks
15m"You've Got Your Nice List of Bugs, Now What?" Vulnerability Discovery and Management
50mBug Bounty Programs: Successfully Controlling Complexity and Perpetual Temptation
55mYour License for Bug Hunting Season
23mThanks for all the bugs!
37mFrom DevSecOops to Security Success: The Bug Bounty Effect at FINN.no
48mGamify your Security
50mTo bounty, or not to bounty? Security@ insights from 500 organizations
52mPractical Tips For Running A Successful Bug Bounty Program