Eray Mitrani

Security Engineer @Meta and occasionally hacker at @Hacker0x01, @Bugcrowd and @SynackRedTeam

[Eray Mitrani @ErayMitrani]

We published XSLeaks payout guidelines a while ago. We are always interested new attack vectors. Payouts: https://t.co/tykjCEaL9l

[Eray Mitrani @ErayMitrani]

Got the M1 upgrade now need to figure out which stickers to decorate it with 🤔

[Eray Mitrani @ErayMitrani]

I've been working on releasing more public payout guidelines for our bug bounty program to increase transparency and show researchers the types of issues we care about. Today we released guidelines for our hardware devices please check them out =) https://t.co/3xN743kDZ1

[Eray Mitrani @ErayMitrani]

Honestly the most tedious part of moving is updating your address everywhere online.

[Eray Mitrani @ErayMitrani]

@vivianphung RSU == cash in the form of stocks. It'll be taxed as income once it vests. Basically keep the shares if you would also purchase shares with your salary. Also Workplace has a lot of help if you're lost like I was 2 years ago :D

[Eray Mitrani @ErayMitrani]

@luketucker It was the best way to show I have real world experience as a new college grad.

[Eray Mitrani @ErayMitrani]

@AJITDut63079157 https://t.co/oCSA8hVTrS

[Eray Mitrani @ErayMitrani]

Recently completed my first year at Facebook. I must say it's been an incredible journey transitioning from a bug bounty hunter to a security engineer and if anyone is interested we are still hiring :)

[Eray Mitrani @ErayMitrani]

@sirdarckcat TFW Google employees don't get Youtube Premium 😃

[Eray Mitrani @ErayMitrani]

Finally ready to share the details of scoring changes for our Whitehat program. Now your signal will play into your position in the leaderboard. More details at: https://t.co/cpVvw5tdac

[Eray Mitrani @ErayMitrani]

@_ayoubfathi_ I wouldn't necessarily call it a discount given their earnings will be down and growth will be slower than expected. So their pricing multiple has to change. Still I'm buying JPM & CRSP for now.

[Eray Mitrani @ErayMitrani]

@alxbrsn You had me in the first half not gonna lie.

[Eray Mitrani @ErayMitrani]

@wongmjane I think the best part is meeting all your coworkers' pets during VC :)

[Eray Mitrani @ErayMitrani]

@wongmjane 💳: 4400 0000 0000 0008
📆: 03/2030
🔑: 737

[Eray Mitrani @ErayMitrani]

@omespino @GoogleVRP It's been a while since I tried but would be a fun challenge to be honest.

[Eray Mitrani @ErayMitrani]

Feeling motivated to start hacking again. I haven't done any bug bounty since h1-702(which was awesome). Looking for suggestions of good public programs to look at :)

[Eray Mitrani @ErayMitrani]

@NahamSec I think @ShopifyEng

[Eray Mitrani @ErayMitrani]

@wongmjane TFW disclaimer is longer than the actual info.

[Eray Mitrani @ErayMitrani]

@sirdarckcat I think few people enable it partly because dupes count as invalid submissions so your signal appears lower than it should. If you do make changes just ignore duplicate submissions from stats. For what it's worth I don't find much value in fake internet points :)

[Eray Mitrani @ErayMitrani]

Check out my 2019 Year In Review on @Hacker0x01: https://t.co/4YSTvepGfW! I should really get back to hacking in Q1 now that I'm settled in my full time position.