What I Learned From My First 100 HackerOne Reports

I started bug bounty in 2019, but in many ways, I didn&rsquo;t fully jump in until mid-2023. I began hacking exclusively on Tesla&rsquo;s program and had some good success. My first report was a hardware vulnerability in their infotainment system. Over time, I expanded into both hardware and web vulnerabilities, eventually working my way into the top 10 all-time on their program - where I still…