Tahsif Hasan Izaz

So, Meta has this fancy feature called "Profile Lock." It’s advertised like a digital fortress. Turn it on, and boom—your past, your secrets, and your embarrassing historical profile pictures are hidden from the prying eyes of non-friends forever. Total privacy, right?

Well, I was on my phone using the Brave browser, looking at a locked profile. Out of pure curiosity, I typed view-source: before the URL.

I expected to see a wall of encrypted gibberish or a single boring placeholder image. Instead, if you scroll past their massive wall of CSS, Facebook literally just hands you the direct CDN links to the user's entire historical library of profile pictures. Full resolution. Publicly downloadable. No friendship required.

Naturally, I thought, "Wow, I just found a major privacy bypass. Let me report this to Meta’s Whitehat Bug Bounty program. Surely a multi-billion-dollar tech giant would want to patch this and hand me a nice fat reward check." 🤑

I filled out the form, attached the proof, and hit submit.

Two minutes later. The Meta triage bot updates my ticket status to: Not Applicable. ❌

Apparently, in Meta-land, if you hide an entire photo album from the frontend user interface but leave the direct high-resolution download links sitting in plain-text HTML for anyone who knows how to read... that’s not a security flaw. That’s "intended architecture."

Lesson learned: "Locked" on Facebook doesn't mean your data is in a vault. It just means they put a "Keep Out" sign on the front door while leaving the back wall completely missing.

Keep clicking that lock button, guys. I’m sure it’s doing something. 🤷‍♂️✈️

⏳ Anyone loves wasting their life, like me??

I made a calculator for us.

It’s a timer that tracks exactly how much of your life has slipped away.

Every second that passes is permanently gone.

I’m 17. Turning 18 in 15 days, so wish me luck!

I coded this entire project on a single wall of raw HTML. No frameworks or boring setup, just pure existential dread 💀

The vibe is gritty, guilty, and weirdly motivating. It forces you to stare your birthdate in the face while a heart beats. Have fun sleeping tonight!

I’m staying at a Signal 10 on Strivle because I’m not connecting my Stripe. I have zero dollars to brag about, but plenty of existential guilt 🤷‍♂️

You can face your own mortality here: izaz80.github.io/existential-timer/

Be brutally honest with me.

Is this the kick in the pants we all need, or did I just make a website that people will look at once and close forever?

Give me your harshest thoughts or suggestions below 💬