Skip to content
← home
Casey Ellis

Casey Ellis

Hacker, founder, advisor, and pioneer of crowdsourced security. Founder of Bugcrowd, co-founder of disclose.io, principal of Tall Poppy Group. Board member at SRLDF.

Security

Priority One: Insights into Submission and Payment Trends

2020: Chaos is a Ladder As 2020 comes to a close, I’ve started to see summaries of the year pop up, covering lessons

16 May 2020 · 3 min read
Security

To err is human — Kerckhoffs' Principle in Software Transparency

Shannon and Kerckhoff were pioneers of disclosure thinking — They understood the concept of “build it like it’s broken”. This was especially true in WWII cryptography, but it’s becoming increasingly clear in its relevance to the 'peacetime' software that we use today.

08 Apr 2020 · 2 min read
Security

Hacking styles

Broadly, there are two things that come into play when it comes to the style a person applies to hacking: The level of experience, and the overall wiring of the hacker.

29 Mar 2020 · 1 min read
Security

A message to folks providing "free testing" at the moment

TLDR: If you’re performing any active, unsanctioned testing on healthcare systems: Please stop it. Don’t make their job any harder than it is right now.

28 Mar 2020 · 1 min read
Security

COVID-19/Coronavirus — What are the bad guys up to?

As expected, the covid19 pandemic has out brought some of the Internet’s worst. I’ve been working with several groups to information share and fight back on this stuff, including the COVID-19 CTI Group.

28 Mar 2020 · 2 min read
Security

Changes

You know that awkward thing at the moment when you see someone and go to shake their hand or hug them, then pull away…

23 Mar 2020 · 1 min read
Security

The importance of delivering well

In general, people like to be think they have the ability to assess risk… you see it in kids jumping over puddles, you see

23 Mar 2020 · 1 min read
Security

On #stopthespread and school closures

On the decision to keep schools open in Australia yesterday: It’s not that kids don’t catch covid. It seems that everyone catches

22 Mar 2020 · 3 min read
Security

Tools for the WFH apocalypse

Well… It’s been an interesting couple of weeks. Viv, the kids, and I decided to bug out back to Australia last Thursday to

20 Mar 2020 · 4 min read
Building

My moves for #rsac2020 & #bsidessf week

Deep breaths, because here we go again!!! The full list of Bugcrowd events can be found here… We’ve got a lot on this

22 Feb 2020 · 2 min read
Policy

Hacking Democracy On Securing an Election (Shmoocon 2020)

Democracy is the cornerstone of America’s Constitution, identity, and ideology, and this foundation was shaken during the 2016 Presidential Election.

01 Feb 2020 · 31 min read
Building

Unity

Unity in a mediocre team > Division in a rock-star team. Driving unity through clear vision, careful hiring, and genuine care of a

23 Jan 2020 · 1 min read