Live data from Hacker News

I Hacked into Facebook's Legal Department Admin Panel

alaa.blog

111–120 of 301 posts

Re: I Hacked into Facebook's Legal Department Admin Panel

#111
post #75

Earlier quoted context omitted.

>Thank god for that. Blog posts like the one this thread is about are really valuable to those of us interested in the work of others. I can see how what I said could be interpreted as 'folks that blog about their work are narcissists'. That wasn't my intent. The headline is a bit clickbaity but the explanation is a good walkthrough. This isn't the far end of the spectrum that I had in mind. Watching twitter or worki…

I worked for several bug bounty programs; showboating didn't really seem to be a major issue.

[deleted]

Re: I Hacked into Facebook's Legal Department Admin Panel

#112

Earlier quoted context omitted.

Rather than the exploiter setting an arbitrary price (which would be closer to blackmail), I think parent comment was saying that the fair market value of disclosing such a bug was worth closer to $75k given the unique skill set required. Skilled engineers turn to cybercrime when white-hat bounties are insufficiently rewarding, so it is in everyone's interest to pay competitive rates for finding security vulnerabilit…

Which is essentially market driven blackmail as far as I can see. Once I meet my new neighbours (one of whom is a moral philosopher by trade) I might ask about how to assess if that's ok. Personally it feels somewhat ok to me, speaking as someone who's built industrial espionage for money.

What does it mean to be a moral philosopher 'by trade'?

Re: I Hacked into Facebook's Legal Department Admin Panel

#113
post #75

Earlier quoted context omitted.

>Thank god for that. Blog posts like the one this thread is about are really valuable to those of us interested in the work of others. I can see how what I said could be interpreted as 'folks that blog about their work are narcissists'. That wasn't my intent. The headline is a bit clickbaity but the explanation is a good walkthrough. This isn't the far end of the spectrum that I had in mind. Watching twitter or worki…

I worked for several bug bounty programs; showboating didn't really seem to be a major issue.

Maybe things have gotten better. I worked for one a while back and came away with a notion of the two distinct communities I described. I try to focus mostly on the positive side, which was the majority and had some amazing and inspiring folks, but the other side had some really irritating people with wholly unprofessional conduct.

Bug Bounty King really spoke to me haha

Re: I Hacked into Facebook's Legal Department Admin Panel

#114
post #76

Earlier quoted context omitted.

So... that's just not how any of that works. Do you really think most of the women you know are choosing to be on onlyfans and are making huge money off it? Hint, no. Not a choice most would make and most accounts there are not making anykind of money like that. But you seem really upset about all this. To be clear, what you are mad about is how there are lots of men willing to pay to see naked and sexual content onl…

not at all. sex workers will exists forever. I guess my beef is how easy it is for young girls to become one now. Are you struggling with calculus? Is physics giving you a hard time? Well, let me tell you about only fans... Joke apart, the appeal were already there. making money from the comfort of your bed. Seeing the how much money you can make thought, that's what really broke my back.

That money is coming from men (mostly men) willing to pay it, I think that's what you ought to be upset about if the situation upsets you, although I don't really understand what about it "broke your back".

I think you are hugely overestimating the number of women making any kind of significant money on onlyfans, let alone the kind of "in a month what a software engineer earns in a year" money you're talking about. That's very few people. If that makes you feel better for whatver reason.

Like every other internet hustle (say instagram "influencers"), so many people are hustling and maybe being taken advantage of and making very little. Who does make serious money is some combination of luck, business sense, aptitude, and lots of work. Some women get rich being models too (and this is of course a kind of modeling, or at least that's part of it), but it's not like any woman can just decide to become rich by modeling.

I'm not sure what you're alarmed about, but if you are foreseeing a future where all women choose to pursue no career but onlyfans, which seems to be literally what you are describing being alarmed about, I don't think you have to worry about that, so perhaps you can sleep better.

Also not sure why we're talking about this on a post about Facebook security vulnerability and their bounty program, but ok.

Re: I Hacked into Facebook's Legal Department Admin Panel

#115
post #112

Earlier quoted context omitted.

Which is essentially market driven blackmail as far as I can see. Once I meet my new neighbours (one of whom is a moral philosopher by trade) I might ask about how to assess if that's ok. Personally it feels somewhat ok to me, speaking as someone who's built industrial espionage for money.

What does it mean to be a moral philosopher 'by trade'?

Unemployed

Re: I Hacked into Facebook's Legal Department Admin Panel

#116
post #112

Earlier quoted context omitted.

Which is essentially market driven blackmail as far as I can see. Once I meet my new neighbours (one of whom is a moral philosopher by trade) I might ask about how to assess if that's ok. Personally it feels somewhat ok to me, speaking as someone who's built industrial espionage for money.

What does it mean to be a moral philosopher 'by trade'?

Presumably that they're an academic moral philosopher.

Re: I Hacked into Facebook's Legal Department Admin Panel

#117
post #66

You brilliant guys need to find a way to extract more than $7500 for solutions to problems that less than what, 2%?, of the worlds population can solve. If I were your tech agent I'd demand Facebook pay out $75,000 minimum for this specific problem.

> I'd demand Facebook pay out $75,000 minimum Wouldn't demanding money be blackmailing? A story from one of my startups: A student reached out to us regarding a security vulnerability on the website, demanding money for it. He refused to say what it was or provide evidence at first, so we couldn't assess it. He said he'd disclose it to others if we didn't. I definitely felt blackmailed. I am not a lawyer but it felt…

IANAL, but it definitely sounds like he's painting a target on himself for civil damages if someone else hacks you by using an exploit he shared.

Re: I Hacked into Facebook's Legal Department Admin Panel

#118

Earlier quoted context omitted.

Rather than the exploiter setting an arbitrary price (which would be closer to blackmail), I think parent comment was saying that the fair market value of disclosing such a bug was worth closer to $75k given the unique skill set required. Skilled engineers turn to cybercrime when white-hat bounties are insufficiently rewarding, so it is in everyone's interest to pay competitive rates for finding security vulnerabilit…

Which is essentially market driven blackmail as far as I can see. Once I meet my new neighbours (one of whom is a moral philosopher by trade) I might ask about how to assess if that's ok. Personally it feels somewhat ok to me, speaking as someone who's built industrial espionage for money.

So, what is your proposed solution for people who find security vulnerabilities in systems? Keep in mind these vulns are worth money in the black market.

Re: I Hacked into Facebook's Legal Department Admin Panel

#119
post #66

Earlier quoted context omitted.

> I'd demand Facebook pay out $75,000 minimum Wouldn't demanding money be blackmailing? A story from one of my startups: A student reached out to us regarding a security vulnerability on the website, demanding money for it. He refused to say what it was or provide evidence at first, so we couldn't assess it. He said he'd disclose it to others if we didn't. I definitely felt blackmailed. I am not a lawyer but it felt…

IANAL, but it definitely sounds like he's painting a target on himself for civil damages if someone else hacks you by using an exploit he shared.

Good luck proving that.

Re: I Hacked into Facebook's Legal Department Admin Panel

#120

Earlier quoted context omitted.

I suppose the illegal part would be the student threatening to disclose the vulnerability to others if you didn't pay. That seems like crossing the line into blackmail and being an accomplice of whoever he discloses to. But the student wouldn't be legally obligated to inform you of a vulnerability, and it wouldn't make sense to if you weren't willing to pay. I can see the difficulty though, I guess you'd need to have…

>> student wouldn't be legally obligated to inform you of a vulnerability, and it wouldn't make sense to if you weren't willing to pay. Which leads to a very interesting situation in negotiating. It's not the first time someone tried to sell information or an idea without getting ripped off. But how can one agree the value of information without knowing it. Is there a standard word or phrase to describe that situatio…

Finder’s fee
Post reply on HN