How to pwn a billion dollar VC firm using inspect element

Re:How to pwn a billion dollar VC firm using inspect element by TheRealPomax on Saturday July 20, 2024 @12:13PM (#41017512)

Alright then: you go to Andreessen Horowitz's website[1] and see if you can find a SINGLE email address in any of the normal places a business would list the (not-social-media) contact information. Because they did their damnedest to make sure you won't find any.

[1] https://a16z.com/

[ Parent | on HN ]

Re:How to pwn a billion dollar VC firm using inspect element by dmix on Saturday July 20, 2024 @12:24PM (#41017612)

I already linked to them in my comment below

Click nav

click “how to connect with us” -> https://a16z.com/connect/

See 4 emails at the bottom for each office

See 4 links to social media pages where every single one has DMs open

Wait at least a couple business days to see if anyone replies, if no one does or it’s not being taken seriously then you can announce it publicly on social media you found something but can’t reach them

[ Parent | on HN ]

Re:How to pwn a billion dollar VC firm using inspect element by mynameisvlad on Saturday July 20, 2024 @12:39PM (#41017712)

> Huge effort, I know

Okay. There’s 4 front office emails and 4 social media accounts, both presumably manned by non-technical folks.

So now you have to go back and forth just to get routed to the right place. Which may not even happen if this is the first time that employee handled a security incident.

You’re making it sound like sending the email or DM is the end of the work. That is usually far from the case.

[ Parent | on HN ]

Re:How to pwn a billion dollar VC firm using inspect element by TheRealPomax on Saturday July 20, 2024 @01:05PM (#41017912)

Emailing an office manager with a company security issue would be incredibly irresponsible. They're in charge of managing the physical office and are about as "outside" as you can get in a company while still being employed by that company.

[ Parent | on HN ]