Previously placed #4 in C4 90 day leaderboard | Security Engineer @Asymmetric Research
Words of Wisdom
"Look one more time"
Some of my most interesting bugs have come from times where I've exhausted all my hypotheses and am about to give up.
But I decide to look at something one more time and a bug jumps out at me.
"Diversify but also play to your strengths"
Some people are just going to be better than you at finding certain types of bugs.
Understand your weaknesses and try to improve, but equally don't discard what you're good at, sometimes it pays to play to your strengths.
"Focus on the important bugs"
Don't waste time on low/informational severity bugs.
There are bigger fish to fry, taking the time to write up reports for low severity bugs isn't a good use of your time when you could instead be finding the more impactful bugs.