I got into YC by hacking it
A developer describes how they discovered a security vulnerability in a Y Combinator-affiliated tool called Paxel. By exploiting an unvalidated HMAC, they were able to manipulate ranking scores, eventually leading to an invitation to YC's Startup School.
Why it matters
It highlights the risks of integrating third-party evaluation tools into application processes and the importance of responsible disclosure.
tldr: I uncovered Y Combinator was scoring 100k+ founders around the world through Paxel, I broke it (possible easter egg) + found a vulnerability that let anyone forge and push any score to their ranking database, courtesy of an unvalidated hmac
The article is a personal account of a technical exploit and its aftermath, focusing on the event rather than ideological framing.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in