News for hackers. Stuff that matters.

A comment on How to pwn a billion dollar VC firm using inspect element. Parent comment

Re:How to pwn a billion dollar VC firm using inspect element by asopd on Saturday July 20, 2024 @11:33AM (#41017175)
Exactly, if he even just browsed their website a bit he'd have stumbled across loads of email addresses that could have been a useful point of contact.
[ Parent | on HN ]
Re:How to pwn a billion dollar VC firm using inspect element by dmix on Saturday July 20, 2024 @11:44AM (#41017266)
It’s more fun getting attention by doing it publicly and being the victim (security researchers love hitting the 'nobody respects us' button) than putting basic effort in.

A single email bouncing is frustrating of course, but he then posted that an easily found vulnerability existed on Twitter, while a16z:

- has a contact page page https://a16z.com/connect/ with 4x emails to their offices at the bottom (despite claims the main site had no other emails)

- links to their Twitter where DMs are open https://x.com/a16z same with instagram, FB, and linkedin, all open

it would be easy to just email all of them at once and waiting a couple days to see if it gets escalated.

[ Parent | on HN ]