Hacker News Reader

deep_thinker26on Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files

It's so great that they allowed him to publish a technical blog post. I once discovered a big vulnerability in a listed consumer tech company -- exposing users' private messages and also allowing to impersonate any user. The company didn't allow me to write a public blogpost.

deep_thinker26on Ask HN: Who wants to be hired? (November 2025)

Location: Dubai, UAE

Remote: Yes

Willing to relocate: Yes

Technologies: Agentic AI, Typescript, NodeJS, Python, ReactJS, Postgres, Docker, K8,

Résumé/CV: http://aaditya.cc/resume

Email: me@aaditya.cc

Experience: 4+ years

Product-focused Software Engineer with 4+ years of experience delivering production-scale systems across early stage startups and global tech companies. Proven record in 0→1 development, scalable infrastructure, and ML-powered product features – driven by speed, clarity, and focus on end-user impact.

deep_thinker26on Ask HN: Bug Bounty Dilemma – Take the $$ and Sign an NDA or Go Public?

thanks for the reply - really appreciate it. I get the sense of what you are indicating and it makes sense as well. Also I am not security researcher, but a software engineer who tinker around with other apps

deep_thinker26on Ask HN: Bug Bounty Dilemma – Take the $$ and Sign an NDA or Go Public?

I am not a security researcher - a full stack engineer who likes to look for vulnerabilities in my free time

deep_thinker26on Ask HN: Bug Bounty Dilemma – Take the $$ and Sign an NDA or Go Public?

Thanks for the reply — really appreciate it.

The company doesn’t deal with health or financial data, but yeah, user impersonation and access to private messages is still serious enough to expect some level of accountability.

I’m holding off on sharing more details for now since mentioning the domain + the vuln might make it too easy to identify the company.

I’m leaning toward a public write-up after giving them fair notice.

One more thing is that the vulnerability has already been fixed (I reported it 3 weeks ago), so not sure how much leverage that still gives.

deep_thinker26on Ask HN: Bug Bounty Dilemma – Take the $$ and Sign an NDA or Go Public?

Thanks for the thoughtful reply — really appreciate it.

I actually stumbled upon the vulnerability without any prior request. They don’t have an active bug bounty program, and the Head of IT Security I’m in touch with mentioned they don’t have dedicated funds for security researchers — which is hard to believe for a company with a £200M+ market cap.

I’ll definitely dig a bit deeper into the legal side.

Based on all the suggestions here, I’m leaning toward quoting them a fair amount considering the impact. If they don’t agree, I’ll likely reject the NDA and do a public write-up after a reasonable disclosure window.

One thing I forgot to mention earlier as of today — the vulnerability is fixed (I reported it around 3 weeks ago), not sure if that changes anything leverage wise.

deep_thinker26on I'm Peter Roberts, immigration attorney, who does work for YC and startups. AMA

How AI ( LLMs, Agents ) can help you?

deep_thinker26on Ask HN: Who is hiring? (November 2021)

Indeed | Software Developers - all level | USA, India, Japan, Singapore | Full Time | Remote, Onsite, Flex

At Indeed (We help people get jobs) https://www.indeed.jobs/ there are multiple open roles. I can refer for any technical roles that you are interested in. Please fill out this google form for the same -- https://forms.gle/xnVtBQoCNCPNKokEA

deep_thinker26on Ask HN: Any good service which can help remote workers to socialise?

With other employees of the same company. For example when we were working from office before COVID we can have coffee break or can play games like Pool, Poker etc.. but in remote work there is no fun activity.

deep_thinker26on Ask HN: Who wants to be hired? (May 2020)

  Location: India

  Remote: Ok

  Willing to relocate: Yes

  Technologies: React, React Native, GraphQl, Apollo, Express, Postgres, Firebase

  Résumé/CV: https://drive.google.com/open?id=1unagTNaVuh6B3KSjWbmPz6h8a2OcobS8

  Email: er.adi2612@gmail.com

deep_thinker26on Ask HN: What projects are you working on now?

I am working on an application by which reader can read books as messages on their favourite messaging application such as Facebook Messenger, Whatsapp. Now a time people are spending a lot of their time on mobile phone and of which they spend 80 percent of their time on social media or messaging platform. They wanna read books but not able to get time for reading. So, we are creating a platform where users can select a book from our collection or upload a book and we will split the book into small twitter sized messages and then user can schedule the messages according to their availability ( no. of messages user wants to receive, In how many days they wanna complete the book ) and based on their schedule and our algorithm we will send them the text snippets. For Authors :- 1. It is very difficult for authors to do marketing for their book and as every year around 1 Lakh books publishes all over the world and of fiction books consist of a big section of this number. So, we are creating a platform where book authors by taking a little bit theme plot of their upcoming book and creates a small and interactive Facebook messenger based story which they can easily used for marketing and It will increase the sale of their upcoming book.

2. Now a days, people are more interested in interactive books where they can be also a part of the book and there are sounds, images but for authors creating a book on top of messaging application is not possible due to technical issues. So, To tackle this problem we are creating a Saas application where book authors can easily create an interactive book which going much into the technology.

More details about the application can be found here :

https://www.notion.so/Blinks-helping-authors-and-reader-4338...

deep_thinker26on Ask HN: Who wants to be hired? (October 2019)

Hi, I am majorly looking for winter internship or some remote full time work.

deep_thinker26on Ask HN: Who wants to be hired? (October 2019)

Location: India

Remote: Sure

Willing to relocate: Yes

Technologies: ReactJs, VueJs, Django, DRF, GraphQl

Resume/CV: https://drive.google.com/file/d/11FfJkFJJlSIiOTNFEHmEspbb1AX...

Email: er.adi2612@gmail.com