Are Live Hacking Events even worth it? (Ep.187)
Source: YouTube · Critical Thinking - Bug Bounty Podcast · published Aug 13, 2026 · 42:33
Live hacking events remain valuable for motivation and fun, but AI tools like Claude and Codex are dramatically increasing dupe rates, forcing hunters to adapt their strategies to stay competitive 3:30.
Key Takeaways:
• JD found multiple critical bugs in a hardware event but faced high dupe rates due to AI saturation 3:30.
• AI tools enable deeper research faster, but similar prompts lead to identical discoveries across hunters 6:50.
• Targeting niche areas and leveraging existing expertise when prompting AI helps avoid duplicates 9:45.
• Pre-existing subject matter expertise is crucial for knowing when to push back on AI denials 6:50.
• Scaling requires managing compute costs, memory constraints, and automating triage pipelines 22:00.
• Bug bounty offers a unique advantage: a direct path to convert AI tokens into cash 22:00.
AI is transforming bug bounty from pure skill into resource management, making strategic subscription scaling and expert-guided prompting essential for profitability.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
My codec subscription tapped out and I was like, "Ah, I got to put some more money on this." So, I went and put 40 bucks on it. >> Instantly gone. It's [laughter] like just ate it for breakfast. [music] >> Best part of backing when you can just, you know, critical thing, right? [music] [laughter] >> Yeah, dude. Sup hackers. Hope you guys are amped up and ready to hack after all the festivities at Defcon this past week and all the crazy research as well that dropped. Um, always very inspiring, I think. Uh, so we have an exciting announcement to give you as well. Um, Adobe is going to be shifting their program over to Integrity. Okay, the cut over date is going to be September 1st. So if you're hacking on them, they're going to pause their program, shift over to Integrity. So, what we want y…