Google Give Me Vulnz - Cameron Vincent
Nullcon Goa 2025 · Main Stage
AI review
Competent bug bounty war story from a credible speaker with real receipts — #1 on Google's VRP in 2019 is not nothing. The four IDOR case studies are concrete, the supply chain angle on Bug 1 is the sharpest moment, and the demo grounds the talk. But IDOR at a security conference in 2024 is well-trodden ground, and nothing here advances the field or teaches an experienced practitioner something they don't already know.