> They viewed the source code. No. "i like to do this thing where i search twitter, looking for companies, and then try giving them a quick pentest" "the com

> They viewed the source code. No. "i like to do this thing where i search twitter, looking for companies, and then try giving them a quick pentest" "the compromised list of services: their database (containing PII), their AWS, their salesforce (never checked, account may be limited), mailgun (arbitrary emails from a16z domains, and also could read older emails) ... and probably more" By their own admission, this is a "pentest", and they were able to access a16z's "database" and ascertain that it contains PII. Amongst other services used by a16z. I'm not the one to judge whether they crossed any legal (or moral) lines though.