Hacker News Reader

Sarah Goodin is not a fake account, she is one of the first Facebook users (back when it was at Harvard only).

How do you know that the post to her wall wasn't his initial discovery of the bug? Any occurrence of the bug was a breach of the ToS.

Not between two test accounts or two accounts that belong to you (work and personal, which you are allowed to have.)