Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #16944

T

These aren't the access_tokens you're looking for

Personal blog · philippeharewood.comsecurityweb

These aren't the access_tokens you're looking for is a personal blog at philippeharewood.com about security and web. Since 2012, 4 different Hacker News readers have linked it 37 times, most often “Subscribe to typing notifications for any Instagram user”. It is still writing: the last post was on 2025-11-14, and you can follow it by feed.

Visit the blog
37mentions?
4HN people?
2012–2021first – last linked?
Links on Hacker News per year · peak 9 in 2013

Too few sampled comments (1) to say how often HN recommends it.?

Why HN links it

HN readers link this blog for web application security writing, including the Google YOLO clickjacking post. One commenter lists it among their favourite security blogs.

Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

Most-linked posts?

  1. Subscribe to typing notifications for any Instagram user
    2 people · 2 mentions · first linked 2019-12-06
  2. Security researcher penalised $3750 by Facebook for verifying vulnerability
    2 people · 2 mentions · first linked 2021-07-21

What Hacker News says?

  1. EdOverflow · 2020-01-30Recommends
    Aside from Filedescriptor's work, here are some of my favourite blogs in the web application security space (not an exhaustive list): - https://blog.orange.tw/ - https://ngailong.wordpress.com/ - https://whitton.io/ - https://sakurity.com/blog - https://homakov.blogspot.com/ - https://buer.haus/ - https://philippeharewood.com/ - https://portswigger.net/research - https://gerbenjavado.com/ - https://medium.com/@intid…

    Comment linking /

    on “Google YOLO clickjacking (2018)”
  2. Submitted Security researcher penalised $3750 by Facebook for verifying vulnerability as a story · 46 points

    HN discussion
  3. This is pretty much the same method a user can use to provide a negative comment using the Like Button comment feature on a company, though actually a lot worse and a bit more annoying. This also appears in "X is posting about Y" which I wrote about a while back [1], grinds my gears really. The ad push is more aggressive than I am comfortable with On the flip side, because how these sponsored stories/posts work, if…

    Comment linking /facebook/make-it-red-and-viral/

    on “How to Spam your Facebook Friends for a Week”
  4. Submitted Getting Your Facebook Page On Your Website With Access Tokens as a story · 5 points

    HN discussion
  5. Submitted How can Facebook support suck so badly as a story · 4 points

    HN discussion
  6. Submitted Leaked Credentials gives access to internalfb.com as a story · 3 points

    HN discussion
  7. Submitted Subscribe to typing notifications for any Instagram user as a story · 3 points

    HN discussion
  8. Submitted Facebook Business Takeover ($27,500 bounty) as a story · 3 points

    HN discussion
  9. Submitted Facebook and Python – The Basic Sauce as a story · 3 points

    HN discussion
  10. Submitted Facebook SSRF as a story · 2 points

    HN discussion
  11. Submitted View Facebook friends for any user as a story · 2 points

    HN discussion
  12. Submitted View Private Instagram Photos as a story · 2 points

    HN discussion
  13. Submitted De-anonymizing Facebook Ads as a story · 2 points

    HN discussion
  14. Submitted Hacker News as a story · 2 points

    HN discussion
  15. Submitted Coding Exercises Exposed at Facebookrecruiting.com as a story · 1 points

    HN discussion
  16. Submitted Bulletin.com Email Address Leak as a story · 1 points

    HN discussion
  17. Submitted Facebook’s /intern/testdata tool: default password n0t3st as a story · 1 points

    HN discussion
  18. Submitted Download Facebook internal mobile builds as a story · 1 points

    HN discussion
  19. Submitted Subscribe to typing notifications for any Instagram user as a story · 1 points

    HN discussion
  20. Submitted Facebook GraphQL CSRF as a story · 1 points

    HN discussion
  21. Submitted Posting GIFs as anyone on Facebook as a story · 1 points

    HN discussion
  22. Submitted How I Could Have Seen All Mark Zuckerberg Facebook Messenger Purchases as a story · 1 points

    HN discussion
  23. Submitted Facebook API v2 bug: Inconsistency with App Scoped User ID – Privacy Leakage as a story · 1 points

    HN discussion
  24. Submitted Facebook Pages Vulnerability – Invite any user to a Facebook page as a story · 1 points

    HN discussion
  25. Submitted Getting Access To Facebook Keyword Insights Data Using A Regular Access Token as a story · 1 points

    HN discussion
  26. Submitted Facebook Insights $4000 Graph API bug as a story · 1 points

    HN discussion
  27. Submitted Getting your Facebook News Feed in PHP – The Basic Sauce as a story · 1 points

    HN discussion
  28. Submitted Facebook FQL Performance Comparison as a story · 1 points

    HN discussion
  29. Submitted Six Degrees of Facebook as a story · 1 points

    HN discussion
  30. Submitted Tupac is posting about Lil Wayne (Facebook Sponsored Stories Evolved) as a story · 1 points

    HN discussion

Search all of HN for philippeharewood.com