BobDaHacker

Tl;dv: Over 180k meetings left wide open

How a missing Firestore security rule on tl;dv exposed 181,874 meetings from 84,312 users across 35,003 domains, including live calls I could join uninvited, and how six months of disclosure got me nothing but seen receipts.

We hacked Burger King: How auth bypass led to drive-thru audio surveillance

I Could've Rickrolled the FIFA World Cup. All I Needed Was My ID

How I found that anyone could register on FIFA's public Agent Platform, gain access to the Football Data Platform's Streaming Management panel, and get RTMP ingest URLs and stream keys for every live FIFA World Cup 2026 camera feed. I then spent hours calling FIFA, MediaKind, HBS, CISA, and the FBI trying to get…

I hacked Monster Energy