AI Weekly Malaysia

Joel Margolis, a bug bounty hunter since 2017 and former bug bounty program manager at multiple large companies, writes a critical retrospective on HackerOne's trajectory from its founding in 2011 by Jobert Abma and Michiel Prins through what he describes as a 'golden age' of live hacking events to its current state, which he frames as needing a 'wellness check.' The piece draws on years of direct experience on both sides of bug bounty programs and private conversations with HackerOne.

Why: If you run or are considering running a bug bounty program on HackerOne, this first-hand account from a long-time program manager signals platform-level issues worth investigating before committing budget or researcher relationships. Builders in Malaysia who rely on HackerOne for vulnerability disclosure should evaluate whether the platform's current trajectory affects program quality, researcher engagement, and payout reliability.

uBlock Origin has reportedly stopped trying to block Facebook ads, conceding that Facebook's ad delivery has become too deeply embedded in its content pipeline to reliably filter. The HN discussion (696 points, 854 comments) reflects broader frustration with the ad-blocker arms race as platforms increasingly interleave ads with organic content.

Why: If you ship browser extensions, content filters, or any tool that relies on DOM-level ad detection, Facebook's approach is a signal that platform-side ad integration is moving toward indistinguishable-from-content delivery — your filtering strategies may need to shift from pattern-matching to heuristic or ML-based approaches. For everyday users in Malaysia where Facebook remains a primary business and community platform, this means ad-blocking on Facebook is effectively over.