News for hackers. Stuff that matters.

A comment on Facebook paid $4.5K for disclosure of my user account exploit. Parent comment

Re:Facebook paid $4.5K for disclosure of my user account exp... by borlak on Friday May 31, 2013 @11:41AM (#5799238)
You can't just view anyone's private photos. They have to have been logged into facebook (have a session) and then go to your domain with the exploit.
[ Parent | on HN ]
Re:Facebook paid $4.5K for disclosure of my user account exp... by tomjen3 on Friday May 31, 2013 @12:28PM (#5799553)
Most people are locked into facebook.

And you could just send them an email, carefully tailored to target them, with a link to your exploit site.

[ Parent | on HN ]