HackerOne · Report #29185
"early preview" programs disclosure
Informativestatus
9upvotes
21 Jan 2015disclosed
How it was found
Hi,
There is a really small issue, but I think it should be fixed.
If you open https://hackerone.com/facebook as guest user (not logged), you will be redirected to https://hackerone.com/users/sign_in, so it shows that facebook page exists and it's private.
Correct redirection should be to #404 page like eg. https://hackerone.com/privateprogram
Cheers, Kacper.