I'd say it does. *Not interact with other accounts without the consent of their ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		franjkovic on Dec 17, 2015 \| parent \| context \| favorite \| on: Bug Bounty Ethics I'd say it does. Not interact with other accounts without the consent of their owners. Edit: whoops I mis-read this a bit, but the point still stands - he escalated using AWS keypair that did not belong to him, and he had no consent of the owner.

ryanlol on Dec 17, 2015 [–]

Obviously that's referring to facebook accounts.

Edit: I feel that your edit is still stretching the terms a bit. It seems pretty clear that this isn't the abuse that the clause intends to prevent.

Also, the guy seems to only have verified that the credentials worked.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact