Stephen Sclafani

Security Researcher

[Stephen Sclafani @Stephen]

Hacking Facebook’s Legacy API, Part 1: Making Calls on Behalf of Any User ($20,000 bounty) http://t.co/ibrHHcm4KK

[Stephen Sclafani @Stephen]

@TheStalwart https://t.co/nN3BelckIk

[Stephen Sclafani @Stephen]

@JosipFranjkovic Five of my reports were Oculus related but I missed this one. Nice find ;)

[Stephen Sclafani @Stephen]

No problem getting an iPhone X through Verizon's site.

[Stephen Sclafani @Stephen]

@CodyBrown CNN's Cold War https://t.co/mnBR0cbmTe

[Stephen Sclafani @Stephen]

@prakharprasad @Nirgoldshlager reading Nir's OAuth writeups is what inspired me to start looking for these types of issues.👍

[Stephen Sclafani @Stephen]

@phwd Thanks. 😀

[Stephen Sclafani @Stephen]

Stealing https://t.co/t8wvPpfta5 Login Nonces https://t.co/JojJGbMR8D

[Stephen Sclafani @Stephen]

Got to hold on posting the writeup for another week while Facebook fixes some related issues.

[Stephen Sclafani @Stephen]

Going to post a writeup of this soon (I promise).

[collin @libber]

Ranty opinions about bug bounty: https://t.co/Lu9wSmkBpN

[Stephen Sclafani @Stephen]

@MikeIsaac When you're done watch the @redlettermedia Plinkett prequel reviews: https://t.co/TqyytWAXQi

[Stephen Sclafani @Stephen]

@real_1x0123 https://t.co/nq3BFygjgA

[Stephen Sclafani @Stephen]

@ericflo There's a personalized recommended feed, usually shows good suggestions for me: https://t.co/AVIYRNmn0G

[Stephen Sclafani @Stephen]

@fmanjoo All of the Viva Piñata games.

[Stephen Sclafani @Stephen]

@MikeIsaac Old: The Omen (1976 version) New: Babadook

[Stephen Sclafani @Stephen]

@samhouston summit is trying to also but it looks like he's having connection issues https://t.co/aRO8JcIBWb

[Stephen Sclafani @Stephen]

@samhouston Reckful is right now https://t.co/isQfoJbN8N

[Stephen Sclafani @Stephen]

@mubix There're programs that will auto-block everyone following someone you block or who follow certain people. You got included somehow.

[Stephen Sclafani @Stephen]

.@phwd I'll try to stop being lazy and do a writeup on this sometime soon.