security-dev@ and 0-day-in-the-wild@ moved to BCC
Hello,
Thanks for reaching out.
I've moved everyone to BCC since these are rather large working groups and we try to keep email minimal and focused on topics pertinent to security development efforts in Chromium (for security-dev@) and information and research pertinent to in the wild exploitation (0day-in-the-wild@).
As concise as Natalie's advice here is, it's very solid and great advice -- a good place to start is learning coding and the fundamentals of how computers work. Looking at open source code (like Chromium) and understanding how it works, such as examining past bugs and fixes (such as in open source bug trackers, e.g.
Chromium's bug tracker) are great places to start. Participating in bug bounty programs (such as
Google BugHunters and
Chrome VRP) are great ways to learn and validate your skills once you start you have some understanding of security vulnerabilities and are finding them in certain products.
For now, we'll need to close this thread so we're not continuing to spam hundreds of people.
Thanks for understanding.
Amy