What-Security
rob@what-security ~ $ whoami --verbose

Robbie
Wiggins

Finding Security Holes Everywhere ¯\_(ツ)_/¯ Bug bounty hunter and vulnerability researcher — disclosed findings to Apple, Google, AT&T, Dell and more. If my domain shows up in your logs, that's legitimate security research.

cat cli-tips.txt
14
disclosures
17
halls of fame
10
years hunting
2016
since
rob@what-security: ~ — terminal
rob@what-security ~ $
type a command and press [ENTER] · try: help whoami ls theme gruvbox
media page.

TechCrunch

Applebee's exposed customers' personal data after leaving database password in app

A hardcoded database password in the Android app gave access to an internal customer database holding names, emails, dates of birth, phone numbers, ZIP codes and veteran status.

Oct 2026

 BleepingComputer

Honda India left details of 50,000 customers exposed on an AWS S3 server

2019-04

 ZDNet

Jira bug exposed private server keys at major companies, researcher finds

Aug 2019