UK cyber pro lands Aussie visa after uncovering govt exploit

"The Australian government invited Jacob Riggs to apply for its Subclass 858 National Innovation visa (NIV), which is reserved for those "who have an internationally recognised record of exceptional and outstanding achievement in an eligible area." Only the most exceptional migrants are invited to apply, including those who demonstrate strong potential to grow the Australian economy in key sectors. The government lists Nobel Prize winners, Olympic gold medallists, recipients of national research grants, and PhD holders as examples of those who could be eligible."

"He said that it took him a couple of hours to find a critical-severity vulnerability in DFAT's systems, which was promptly fixed, resulting in his name appearing as one of just four to have successfully reported a bug under the scheme. According to the timeline of his application process, Riggs was invited to apply for the visa in May, so the DFAT vulnerability, discovered in July, had no role in getting the opportunity to apply, but the researcher suggests it may have contributed to his success in securing the NIV. He said: "I can't say how much this tiny additional evidence influenced the outcome of my 858 application, if at all, but I'd like to think it helped demonstrate, in a small and perhaps practical way, that I'm capable and committed to supporting Australia's cybersecurity"

Jacob Riggs, a 36-year-old Londoner, submitted an expression of interest for Australia's Subclass 858 National Innovation visa in April and waited while his application was reviewed. With the application still in the queue, Riggs searched government networks and targeted the Department of Foreign Affairs and Trade because it maintained a responsible disclosure framework. He found a critical-severity vulnerability in DFAT systems within a few hours; the vulnerability was promptly fixed and his report placed him among four successful reporters under the scheme. The official visa invitation predated the discovery, but Riggs suggests the report may have bolstered his demonstration of commitment to Australia's cybersecurity.

Read at Theregister