Top all-time · #9550
Youssef Sammouda
Personal blog · ysamm.comsecurity
Youssef Sammouda's personal blog at ysamm.com covers security. Since 2019, 8 different Hacker News readers have linked it 10 times, most often “Multiple bugs chained to takeover Facebook Accounts which uses Gmail”. It is still writing: the last post was on 2026-01-16, and you can follow it by feed.
The goal of this blog is to share write-ups about bugs i have found in Facebook and reported to them under the Facebook bug bounty program.
Most-linked posts?
- Multiple bugs chained to takeover Facebook Accounts which uses Gmail3 people · 3 mentions · first linked 2022-05-21
What Hacker News says?
Submitted Identify a Facebook user by his phone number despite privacy settings set as a story · 149 points
HN discussionSubmitted Multiple bugs chained to takeover Facebook Accounts which uses Gmail as a story · 2 points
HN discussionSubmitted Multiple bugs chained to takeover Facebook Accounts which uses Gmail as a story · 2 points
HN discussionSubmitted Facebook CSRF protection bypass which leads to Account Takeover as a story · 2 points
HN discussionSubmitted XSS in Meta API Gateway Leads to Zero-Click Account Takeover [$300k Bounty] as a story · 1 points
HN discussionSubmitted $250K+ XSS in Meta Conversion API Leading to Zero-Click Account Takeover as a story · 1 points
HN discussionSubmitted Bug Bounty: Multiple bugs chained to takeover Facebook Accounts which uses Gmail as a story · 1 points
HN discussionSubmitted Facebook Canvas: $126k worth of bugs that lead to Facebook Account Takeovers as a story · 1 points
HN discussionSubmitted Account takeover of Instagram accounts due to unrestricted token permissions as a story · 1 points
HN discussionSubmitted Facebook DOM Based XSS Using PostMessage as a story · 1 points
HN discussion