xnwup (@xnwup) profile picture

xnwup

@xnwup
Joined April 2018
  • Tweets158
  • Following325
  • Followers774
16Media
Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)Photo by xnwup (@xnwup)
Today, Hackerone took $25k from me, because I am a belarusian citizen. 1/9
Image from xnwup (@xnwup)
Image from xnwup (@xnwup)
229
921
308
5,123
Best video on networking I've seen (maybe best educational video at all) by @TomNomNom . It's like someone compressed dozens of books and decades of experience into 1-hour gold nugget youtube.com/watch?v=9uebakqW…
1
11
60
Found critical vuln on @datastax and was "rewarded" $3000 (max for their program). Did I get this money? Nope. All I got was block on Twitter from Datastax CEO 😂 #togetherwehitharder #bugbounty #makingInternetSafer
Image from xnwup (@xnwup)
Image from xnwup (@xnwup)
12
18
2
146
Oh noes, Marten sanctioned my Twitter as well 😅
Image from xnwup (@xnwup)
4
1
25
Regarding @Hacker0x01 incident with internal threat, who everyone called a "rogue employee". It's not rogue. It's company culture.
1
4
If you go to twitter account of this 0xRzlr guy, you see his latest tweet is about how Hackerone stole $50k from a researcher. Employees see an example set by the top brass and act the same.
2
Hey h1 board, are you aware that Mr. Mickos publicly stated "hurt russians" as his life goals? That he then concocted a scheme to steal from researchers using non-existent sanctions? Are you backing this? @HilarieKM @philvenables @bgurley @betz2dot0 @SaabConstantine @katie_haun
https://twitter.com/martenmickos/status/1498782004002783232

ALT https://twitter.com/martenmickos/status/1498782004002783232

2
Hackerone steals from researchers based on nationality, using sanctions as pretense. Proof that their executive team (@martenmickos @michielprins) publicly lied about sanctions when there are none (confirmed by OFAC)
Screenshot of an email from ofac_feedback@treasury.gov that says "Good afternoon. At this time, Belarus is not comprehensively sanctioned by the US. Thank you."

ALT Screenshot of an email from ofac_feedback@treasury.gov that says "Good afternoon. At this time, Belarus is not comprehensively sanctioned by the US. Thank you."

https://twitter.com/martenmickos/status/1503160852307857408

ALT https://twitter.com/martenmickos/status/1503160852307857408

https://twitter.com/michielprins/status/1504484143635173381

ALT https://twitter.com/michielprins/status/1504484143635173381

3
3
15
Hey @NEA , you are investing in Hackerone. Hackerone steals from researchers based on nationality. Are you aware? Does NEA support it? @HilarieKM @philvenables @bgurley @betz2dot0 @SaabConstantine @katie_haun
React debug.keystore key was trusted by Meta(Facebook) which caused to Instagram account takeover by malicious apps. More information -> vulnano.com/2022/07/react-de…
1
59
175
Lol. Turns out, you can just casually email OFAC and they will actually answer. This is what they have to say about @Hacker0x01 lies 🤣
Image from xnwup (@xnwup)
1
5
FYI OFAC is that US govt department that imposes foreign sanctions
Hackerone might be the only company that decided to not pay citizens of Belarus/Russia what they owed them prior to invasion of Ukraine. They won't send $25k that I earned in 2021. They say sanctions are the reason, but actually the reasons are not legal, but... ideological. 1/
Image from xnwup (@xnwup)
2
6
33
more replies
So... that's it. Hackerone not paying what they owe me and other researchers is an "economic weapon" and has nothing to do with sanctions - lack of legal reasons for non-payment along with "harm Russia" motto make that pretty clear. 16/
1
3
Maybe that logic is justifiable. What do you think? Should private US companies seize (a.k.a. indefinitely "freeze") funds of belarusian citizens as a retribution for invasion of Ukraine? Or should they still pay what they owed prior to invasion, if the law permits it? 17/17
2
Load more