Live data from Hacker News

I Hacked into Facebook's Legal Department Admin Panel

alaa.blog

61–70 of 301 posts

Re: I Hacked into Facebook's Legal Department Admin Panel

#62
post #43
post #39

Earlier quoted context omitted.

Describing that work as "being naked in front of a webcam" is like calling software development "typing at a computer". You can make any job sounds trivial and downplay its value by describing it in a way that removes the skill and effort involved. I'm not sure why you feel the need to imply some else's work isn't valuable to make the point that this work should be more valuable.

ok, I'll bite. What kind of skill to you need to have, besides being born attractive, to succeed in such business?

Like a lot of businesses in the addiction space, cam workers make a lot of their money off whales. So the profit comes from high effort relationship maintenance / customer service.

Re: I Hacked into Facebook's Legal Department Admin Panel

#63
post #43

Earlier quoted context omitted.

ok, I'll bite. What kind of skill to you need to have, besides being born attractive, to succeed in such business?

Someone attractive can have the charisma of a dead fish.

People will pay for that

Re: I Hacked into Facebook's Legal Department Admin Panel

#64
post #24
post #15

I find the paragraph where the author described the exploit hard to read. Basically, he triggered the "Password Reset" process and then guessed the reset token?

> I sent random requests using intruder with a CSRF token and random emails with a new password to this endpoint /savepassword So this endpoint simply allowed setting up a new password with a POST request for the specified email address and he was able to guess the email .. ¯\_(ツ)_/¯

[deleted]

Re: I Hacked into Facebook's Legal Department Admin Panel

#65

You brilliant guys need to find a way to extract more than $7500 for solutions to problems that less than what, 2%?, of the worlds population can solve. If I were your tech agent I'd demand Facebook pay out $75,000 minimum for this specific problem.

2%? You have an interesting idea of the world's population. Just think about what that means. It means 2 out of 100 people can hack into Facebook's Legal Department Admin Panel.

I mean if we are talking "mentally capable to achieve that within a decade if the person does nothing else but strive to that goal"... Perhaps.

If we are talking "sit down right now and do it", then it's more like what... 10,000-100,000 people on earth? Which makes for more like 0.0014%?

Re: I Hacked into Facebook's Legal Department Admin Panel

#66

You brilliant guys need to find a way to extract more than $7500 for solutions to problems that less than what, 2%?, of the worlds population can solve. If I were your tech agent I'd demand Facebook pay out $75,000 minimum for this specific problem.

> I'd demand Facebook pay out $75,000 minimum

Wouldn't demanding money be blackmailing?

A story from one of my startups: A student reached out to us regarding a security vulnerability on the website, demanding money for it. He refused to say what it was or provide evidence at first, so we couldn't assess it. He said he'd disclose it to others if we didn't.

I definitely felt blackmailed. I am not a lawyer but it felt illegal. Maybe someone can chime in to say if it is?

Re: I Hacked into Facebook's Legal Department Admin Panel

#67
post #20

$7500? Why are these bug bounties so piddling? How much would an exploit like this be worth on the black market? What's the potential loss / liability on Facebook's side? Hundreds of thousands? Millions?

There is no easily accessible "black market" for a hack like this. As an average person what is your alternative really? Pick up the phone and call the government of Iran? It is far more convenient (and safer) to just take the guaranteed ~$10K and move on with your life.

I've deleted my comment, but will replace it with this interesting discussion:

https://news.ycombinator.com/item?id=20651210

Re: I Hacked into Facebook's Legal Department Admin Panel

#68
post #45

Earlier quoted context omitted.

>but seeing how much someone makes by being naked in front of a web cam vs a software engineer salary is kinda sad. >some of the only fans users makes in a month what a plain SE would make in a year I'm sure if you could think of a way to make software engineers as appealing as naked women, you'd probably find yourself a pretty great job paying well over the people on onlyfans.

well, I might. I finish college back in 2019 and my teacher who was my counselor, runs several projects trying to make SE and CS more attractive to girls. I guess she'll have a harder job to do now, knowing that a girl could rely on her beauty to makes thousands of dollars exposing herself to strangers. Damn it, I have a two year old niece, I guess me and my brother better think something fast, so when shes a teenage…

So... that's just not how any of that works. Do you really think most of the women you know are choosing to be on onlyfans and are making huge money off it? Hint, no. Not a choice most would make and most accounts there are not making anykind of money like that.

But you seem really upset about all this. To be clear, what you are mad about is how there are lots of men willing to pay to see naked and sexual content online, right? That really upsets you?

Re: I Hacked into Facebook's Legal Department Admin Panel

#69
post #65

You brilliant guys need to find a way to extract more than $7500 for solutions to problems that less than what, 2%?, of the worlds population can solve. If I were your tech agent I'd demand Facebook pay out $75,000 minimum for this specific problem.

2%? You have an interesting idea of the world's population. Just think about what that means. It means 2 out of 100 people can hack into Facebook's Legal Department Admin Panel. I mean if we are talking "mentally capable to achieve that within a decade if the person does nothing else but strive to that goal"... Perhaps. If we are talking "sit down right now and do it", then it's more like what... 10,000-100,000 peopl…

So logically you deserve to be paid 0.0014% of Facebook’s yearly revenue, which is around $1,176,000.00! /s

Re: I Hacked into Facebook's Legal Department Admin Panel

#70
$7500 seems low for this bug. If I were Facebook i would raise it. Why?

Cost/benefit analysis tells me I could probably get a lot more for this bug going to some more nefarious actors.

$7500 is a drop in the ocean for a company like FB who has a reputation to keep intact.

Post reply on HN