Pinned Tweet
Hacking Facebook’s Legacy API, Part 1: Making Calls on Behalf of Any User ($20,000 bounty) stephensclafani.com/2014/07/…
Stealing Messenger.com Login Nonces stephensclafani.com/2017/03/…
Stephen Sclafani retweeted
Ranty opinions about bug bounty: medium.com/@collingreene/to-…
.@phwd I'll try to stop being lazy and do a writeup on this sometime soon.
@Cvinciguerra1 @5dogstexas A bunch of stocks weren't getting new data on etrade. Looks to be fixed now for me.
Anti-ride-sharing ad from a local black car service: three guys in a bar, one gets a ping from an Uber-like app, stumbles out drunk.
Finally heard from United that my bounty submission was accepted (500,000 miles). cc: @NealPoole
CRISPR is a real big deal techcrunch.com/2015/05/13/th…
The new Facebook HQ has an office that's also a ball pit. facebook.com/photo.php?fbid=…
Reported a couple bugs to the Western Union bounty program. Waiting on responses. Haven't bothered with other programs than FB in a while.
@ehomakov There are nice places in SF on Airbnb for a lot less than that.
I probably should write a blog post on this Facebook bug bounty from December. #lazy






