A ‘Master Class’ in Bug Bounty: Jason Haddix on the Paranoids’ Program

The podcast welcomes its first outside guest: Jason Haddix, a bug bounty veteran who has participated in hundreds of programs over his career.

He joins the Paranoids’ team — Arjun Govindaraju and Jonathon Robin — who run our program’s strategy and operations.  

Over the course of roughly 45 minutes or so, they discuss: 

• ‘What makes the Paranoids’ program COOL?!’ (3:43)
• The Importance of Scope (5:50)
• Live Hacking Events (15:27)
• The Art of Recon  (24:04)
• The Bug Bounty Lifecycle (32:20)
• Advice for Security Researchers (39:00)

Hosts: Shawn Thomas (FIRE Chief) and Steven Asifo (Technical Security Manager, Governance, Risk, and Compliance)

Guests:  Jason Haddix, Arjun Govindaraju (Bug Bounty Program Lead), and Jonathon Robin (Bug Bounty Operations Lead)

Are you looking to get in touch because of something you found on 

Yahoo properties? Reach out to us using the contact information you find here: https://www.yahoo.com/.well-known/security.txt

Chapters

• 4:02 ‘What makes the Paranoids’ program COOL?!’
• 6:09 The Importance of Scope: 🤑Is it NOT JUST the money?! 🤑
• 15:46 Live Hacking Events
• 24:23 The Art of Recon
• 32:39 The Bug Bounty Lifecycle
• 39:19 Advice for Security Researchers