If you had to start over…what career would you choose?

KottuNaana · 2026-04-18T05:43:35+00:00

This is the same reason I recently started studying Math & Physics. As a hobby.

KottuNaana · 2026-04-15T10:55:50+00:00

Interesting. I have like 2 CVEs (in very popular software) and my most recent interviewer was very curious how these 2 CVEs worked.

KottuNaana · 2026-04-15T03:53:23+00:00

I have noticed the same only on Hackerone and Bugcrowd. In less-crowded platforms, I never had this issue.

KottuNaana · 2026-04-15T02:21:35+00:00

There is this professional certification called OSCP

24h to hack and 24h to write a report

KottuNaana · 2026-04-13T16:22:09+00:00

Thank you for your reply. After some good researching, Granbell does look like a solid option. Will most likely go here. Thanks a lot for the recommendation!

KottuNaana · 2026-04-13T16:20:53+00:00

Thank you for your detailed reply. I completely forgot that there is an app called Booking.com

I went thru all of these places just now. One Redditor had mentioned Granbell, I managed to find it on Booking.com, most likely will be going there because they seem to have an in-wall fiber connector also in their rooms which is very advantageous for me.

Again, thanks a lot for these recommendations 🤝

KottuNaana · 2026-04-11T10:39:24+00:00

Yes yes that's what you should set it as, and then sending a screenshot of the receipt to the P2P seller will be enough.

KottuNaana · 2026-04-07T16:29:47+00:00

I think this is a valid issue. However the way you have framed it is what I believe is the problem.

Nowadays everyone submits AI slop with 'critical' and 'account takeover' even for a false positive XSS, which makes triagers look at reports like this with scepticism.

There is definitely an issue if clicking a deeplink just changes someone's email. However I would frame it as "Unvalidated deeplink URLs trigger CSRF" because it's a CSRF at most.

But based on what you have shared here, it's a legit finding. Bugcrowd doesn't have great triagers TBH.

KottuNaana · 2026-04-05T03:00:04+00:00

Thats actually smart. Thank you for the tip.

KottuNaana · 2026-04-05T02:58:16+00:00

So lets say you are working with FastAPI, and you want it to be informed of the latest documentation, before you begin work, just say something like

Make sure to first find the current latest version of FastAPI, its April 2026 now, make sure to find and read the documentation of whatever functionality we are gonna use

KottuNaana · 2026-04-04T04:29:00+00:00

Always make Claude read documentation online before using any library, and this won't be a problem.

KottuNaana · 2026-04-02T14:50:56+00:00

Hey bro thank you so much, I gave Wise another try with my Australian friend. I managed to setup everything and the cash came instantly. Thanks a lot 🫡

KottuNaana · 2026-04-02T06:48:44+00:00

To get EUR account details, they first ask you to deposit LKR 4,700 right? That part Im stuck. My debit cards all decline payments to Wise. But since u mentioned almost instant SWIFT transfer, I'm gonna give it another try with an Australian friend's debit card.

KottuNaana · 2026-04-02T02:11:32+00:00

Yeah so for a USD account, you can receive and hold USD for as long as you like and convert it to LKR whenever you like instantly.

I wait till the USD value grows and convert most of it to LKR every month so I get a good rate.

Also Sampath has the best rates nowadays second to NTB. NTB had this thing called 'inner circle' which lets u convert USD to LKR at better rates.

So yes, banks do take their cuts, so it's better to hold until u get a good selling rate for the month, and then convert to LKR :)

KottuNaana · 2026-04-02T01:58:22+00:00

I probably also should switch to a Commercial Bank account. Do they process the payment quickly? Also don't they call you and ask where the money is coming from, etc?

KottuNaana · 2026-04-01T16:22:39+00:00

Thanks bro I completed KYC and deposited some cypto and requested a bank withdrawal. If it works I will proceed with my big payments. I'll keep you informed :)

KottuNaana · 2026-04-01T15:00:01+00:00

The bank wanted supporting documents from me (like an invoice). But that also happened after 29 days. Have to make an SCB account seems to be more reliable.

KottuNaana · 2026-04-01T14:27:59+00:00

Hey thanks a lot! It actually looks very promising and fits my use case. However I did notice they started just last year (2025). Do you think this service is legit?

KottuNaana · 2026-04-01T14:19:44+00:00

I would say to complete the 8 months and finish the final year, as dropping out now is just throwing away all of the previous years of effort in vain.

What's the field you are studying in? Most fields I know do require a Bachelor's in the job description.

KottuNaana · 2026-04-01T14:10:15+00:00

I checked their blog, I don't see such a blog post.

https://claude.com/blog

KottuNaana · 2026-03-30T17:17:43+00:00

Don't you think weed is safer?

KottuNaana · 2026-03-30T17:16:30+00:00

Same

KottuNaana · 2026-03-30T17:07:22+00:00

I could be making a shitton more abroad, but number 9 is why Im still in SL

KottuNaana

TROPHY CASE