'I hacked Facebook – and found someone had beaten me to it'

Bug bounty hunter stumbles across backdoor leaking FB staff usernames, passwords

A bug bounty hunter compromises a Facebook staff server through a sloppy file-sharing webapp - and finds someone's already beaten him to it by backdooring the machine."