Sabitlenmiş Tweet
SysTrack
88 posts


@SysTrack40 @Hacker0x01 its a cool hat ngl, i've been wearing it since months
English

I don't think I've ever been this excited about a hat before. lol.
Does this mean I'm a hacker now?
Thanks @Hacker0x01

English

@syskage @IceSolst @paulswaney3 Nobody will take you seriously in a boardroom with an attitude like that. Lol
English

@IceSolst @paulswaney3 He's gonna screenshot this and talk about how much of a loser we are now.
English

Young people massively underestimate how their public social media can kill high-paying job offers
I have personally seen 5 offer letters pulled in NY over social media content. All were 300k plus total comp roles. Real cases
If you are aiming for 85k forever, you are probably fine
If you want bigger things, read this


English

Just gonna vaguepost this one as well and do an evil laugh in the corner

Joseph Thacker@rez0__
vague posting is the best posting haha
English

not pictured: all the reasons why this is the golden year for bug bounty and you can make more than ever
tldr: it's a picture of 2027
Joseph Thacker@rez0__
the tldr
English

I don't do sponsorships on my YouTube channel, but...
exceptions can be made.
Framework@FrameworkPuter
Our biggest breakthrough in efficiency yet, the Framework Laptop 13 Pro with 20 hours of battery life. In Graphite. Linux-first with options for Ubuntu pre-installed. Featuring Intel® Core™ Ultra Series 3 processors, LPCAMM2 Memory, a new haptic touchpad, and a touchscreen display. Pre-orders for the Framework Laptop 13 Pro open now: frame.work
English
SysTrack retweetledi

To be secure in 2026 you have to shut down your bug bounty program on HackerOne.
Lovable got hacked because HackerOne's incompetent triage team closed multiple valid vulnerability reports starting February 22, 2026 as "intended behavior."
Poorly trained monkeys. Zero escalation to Lovable's security team. AI bots auto-closing critical findings.
The result? Public project chat history and source code were exposed for MONTHS until a researcher was forced to go public.
Two companies. Same platform. Same failure. Same lies.
ClickUp. Lovable. Both breached because HackerOne buried critical reports while collecting your bounty fees.
HackerOne is NOT a security partner. They are a liability.
They close real vulnerabilities. They protect their own metrics over your data. They let researchers get attacked while they stay silent.
Stop paying HackerOne to get hacked.
lovable.dev/blog/our-respo…

English

@krigshaw to put out content, and help hackers learn.
And I respect the platforms too. Even though I don't always agree with them...
But maybe that's something we need to address in ourselves, not just direct anger at others over.
My 2 cents...
Just keep swimming
Just keep swimming
GIF
English

@krigshaw So maybe this is still all part of the learning experience. And maybe it will never be perfect.
But I don't think it's THAT bad either.
I don't think it's so bad, where we should feel the need to shit on others for not defending us.
I respect anyone putting in the work 6/
English

A lot of people probably do not have the guts or balls to say this but I will say it. I have noticed that a lot of known security researchers are almost "in bed" with Hacker platforms and forget where they came from or just don't care anymore because they've already made it.
The only one that I haven't seen like this is @Jhaddix. Every single time I see someone stand up for themselves against the atrocious injustices and ACTUAL unethical practices of these Hacker platforms against security researchers, I see these big names white-knighting for the platform, as if the platform isn't already a multi-million or multi-billion dollar corporation with multiple white knights on their payroll already. And it's honestly very disappointing and frustrating. People like @rez0__ and @InsiderPhD are prime examples, and should be using their platform to fight for the bug hunters, not against them.
It's honestly not only incredibly disrespectful but also a massive letdown. Like, we see these people as not only peers but pillars in the community. For me personally it pains me to write this this since I followed the Critical Thinking podcast in the past, the podcast "by Hackers for Hackers" by the way, unless apparently you post about a Hacker platform hosting a corrupt program that is ghosting you and not paying you for your find.
And that my friends is an example of what's become the downfall of the entire bug bounty ecosystem: say one thing, do another. Hacker platforms say they'll pay you X bounty for Y finding, and when you do the report and follow their own "good-faith" principles, they'll downplay your find, ghost your requests, and scam you of your bounty. And the same people you thought were there to defend you when you try to take a stand are actually waiting to be outraged by your stance instead, because they've "met" and "are friends" and "partied at DEFCON" with employees from these platforms 🤡.
STOP defending hacker platforms and START defending the hackers, THE PRODUCT. Without us hackers these platforms would be useless.
English









