News for hackers. Stuff that matters.

deep_thinker26

It's so great that they allowed him to publish a technical blog post. I once discovered a big vulnerability in a listed consumer tech company -- exposing users' private messages and also allowing to impersonate any user. The company didn't allow me to write a public blogpost.
Re:Ask HN: Who wants to be hired? (November 2025) on Tuesday November 04, 2025 @04:01PM (#45815841)
Location: Dubai, UAE

Remote: Yes

Willing to relocate: Yes

Technologies: Agentic AI, Typescript, NodeJS, Python, ReactJS, Postgres, Docker, K8,

Résumé/CV: http://aaditya.cc/resume

Email: [email protected]

Experience: 4+ years

Product-focused Software Engineer with 4+ years of experience delivering production-scale systems across early stage startups and global tech companies. Proven record in 0→1 development, scalable infrastructure, and ML-powered product features – driven by speed, clarity, and focus on end-user impact.

thanks for the reply - really appreciate it. I get the sense of what you are indicating and it makes sense as well. Also I am not security researcher, but a software engineer who tinker around with other apps
I am not a security researcher - a full stack engineer who likes to look for vulnerabilities in my free time
Thanks for the reply — really appreciate it.

The company doesn’t deal with health or financial data, but yeah, user impersonation and access to private messages is still serious enough to expect some level of accountability.

I’m holding off on sharing more details for now since mentioning the domain + the vuln might make it too easy to identify the company.

I’m leaning toward a public write-up after giving them fair notice.

One more thing is that the vulnerability has already been fixed (I reported it 3 weeks ago), so not sure how much leverage that still gives.

Thanks for the thoughtful reply — really appreciate it.

I actually stumbled upon the vulnerability without any prior request. They don’t have an active bug bounty program, and the Head of IT Security I’m in touch with mentioned they don’t have dedicated funds for security researchers — which is hard to believe for a company with a £200M+ market cap.

I’ll definitely dig a bit deeper into the legal side.

Based on all the suggestions here, I’m leaning toward quoting them a fair amount considering the impact. If they don’t agree, I’ll likely reject the NDA and do a public write-up after a reasonable disclosure window.

One thing I forgot to mention earlier as of today — the vulnerability is fixed (I reported it around 3 weeks ago), not sure if that changes anything leverage wise.

Ask HN: Bug Bounty Dilemma – Take the $$ and Sign an NDA or Go Public?

Hi everyone,I recently found a high-criticality vulnerability in a listed consumer company in the UK. It allows unauthorized access to users’ private messages and even lets you impersonate other users on the platform.They’ve offered a €1,000 bounty, but only if I sign an NDA that prevents any public write-up—even after the issue is patched.I feel the bounty is too low for the impact, and asking...

( Read More... | 14 comments | 5 points | on HN )
How AI ( LLMs, Agents ) can help you?
Re:Ask HN: Who is hiring? (November 2021) on Tuesday November 02, 2021 @03:28PM (#29086284)
Indeed | Software Developers - all level | USA, India, Japan, Singapore | Full Time | Remote, Onsite, Flex

At Indeed (We help people get jobs) https://www.indeed.jobs/ there are multiple open roles. I can refer for any technical roles that you are interested in. Please fill out this google form for the same -- https://forms.gle/xnVtBQoCNCPNKokEA

With other employees of the same company. For example when we were working from office before COVID we can have coffee break or can play games like Pool, Poker etc.. but in remote work there is no fun activity.
Re:Ask HN: Who wants to be hired? (May 2020) on Sunday May 03, 2020 @05:43AM (#23057972)

  Location: India

  Remote: Ok

  Willing to relocate: Yes

  Technologies: React, React Native, GraphQl, Apollo, Express, Postgres, Firebase

  Résumé/CV: https://drive.google.com/open?id=1unagTNaVuh6B3KSjWbmPz6h8a2OcobS8

  Email: [email protected]
Re:Ask HN: What projects are you working on now? on Saturday March 21, 2020 @11:06PM (#22652352)
I am working on an application by which reader can read books as messages on their favourite messaging application such as Facebook Messenger, Whatsapp. Now a time people are spending a lot of their time on mobile phone and of which they spend 80 percent of their time on social media or messaging platform. They wanna read books but not able to get time for reading. So, we are creating a platform where users can select a book from our collection or upload a book and we will split the book into small twitter sized messages and then user can schedule the messages according to their availability ( no. of messages user wants to receive, In how many days they wanna complete the book ) and based on their schedule and our algorithm we will send them the text snippets. For Authors :- 1. It is very difficult for authors to do marketing for their book and as every year around 1 Lakh books publishes all over the world and of fiction books consist of a big section of this number. So, we are creating a platform where book authors by taking a little bit theme plot of their upcoming book and creates a small and interactive Facebook messenger based story which they can easily used for marketing and It will increase the sale of their upcoming book.

2. Now a days, people are more interested in interactive books where they can be also a part of the book and there are sounds, images but for authors creating a book on top of messaging application is not possible due to technical issues. So, To tackle this problem we are creating a Saas application where book authors can easily create an interactive book which going much into the technology.

More details about the application can be found here :

https://www.notion.so/Blinks-helping-authors-and-reader-4338...

Blinks – Helping book authors and readers

I am creating a Saas application by which reader can read books as messages on their favourite messaging application such as Facebook Messenger, Whatsapp. Now a time people are spending a lot of their time on mobile phone and of which they spend 80 percent of their time on social media or messaging platform. They wanna read books but not able to get time for reading. So, we are creating a...

( Read More... | no comments | 2 points | on HN )
Re:Ask HN: Who wants to be hired? (October 2019) on Wednesday October 02, 2019 @12:12PM (#21138053)
Hi, I am majorly looking for winter internship or some remote full time work.
Re:Ask HN: Who wants to be hired? (October 2019) on Tuesday October 01, 2019 @05:46PM (#21131055)
Location: India

Remote: Sure

Willing to relocate: Yes

Technologies: ReactJs, VueJs, Django, DRF, GraphQl

Resume/CV: https://drive.google.com/file/d/11FfJkFJJlSIiOTNFEHmEspbb1AX...

Email: [email protected]

Confused about Me – Don't wanna do a cooperate job

I am presently 3rd year student. I am good with programming and have done two internships and everything is going pretty smooth. The Problem is that I don't wanna endup working in a MNC. I wanna build stuff. I like to work with startup and I want to build one But I am not getting any good ideas. So, Stuck with it.Any Suggestion of what I can do know. I even don't like being in College I am...

( Read More... | 1 comment | 2 points | on HN )