Chapter 13

1. The SANS Institute and Bugcrowd blogs, along with Darknet, HighOn.Coffee, and others, all represent good sources for up-to-date technical tutorials and security news.
2. Public bug bounties, which do not grant researchers privileged access to source code, are strictly Black Box affairs.
3. RCE allows for a staggering array of exploits. With the full powers of a Turing Complete scripting language, there's no limiting the damage.
4. "Safe Harbor" here is used to describe the policy that companies won't prosecute researchers who abide by certain terms.
5. Cross-Origin Resource Sharing is a system that governs the security process for resource requests coming from different origins (hostnames, ports, and so on).
6. An organization's security posture is simply its ability to deter, detect, and respond to digital threats.
7. Fingerprinting an application provides...