Hacker News Reader

I am wondering why the OP decided to post it here, rather than try and get a bug bounty (edit: assuming it's a genuine issue, seems like maybe it isn't). It would probably be worth a fair amount...certainly a few thousand at least. Facebook are normally pretty happy for you to disclose after they fix it, so you can still get the PR...

View on HN

After I commented, I flagged the post. I'm not comfortable with this being on HN. FB should have a chance to fix it.

On the plus side, the entire thing may just be a misunderstanding. Other commenters are pointing out that it doesn't really live message them if you're not friends, just regular messages them -- which you could do anyway. It's just the UI appears that you are live messaging.

We'll see. But you're right -- very odd to post that here with a reward being easily available.

Confirming it's the default behavior. After some googling this call is known on the internet. It's just a shortcut to the original(quite hidden) behavior. Check comments below with "FacebookChatRoulette". It's interesting how easy and automated can be to send a msg to anyone. So that raises some concerns. Definetly not a bug ..

Reply on news.ycombinator.com