Show Notes
What happens when a 15-year-old hacker quietly discovers a single bug that touches over half of the Fortune 500, chains it into a Slack takeover, and walks away with $50K in bug bounties – only for the original vendor to refuse to pay? In this episode of SEEK Bytes, we break down Daniel’s Zendesk exploit, the ethics of disclosure, and what “white hat” really means in practice.
We unpack how a “basic” support inbox ([email protected]), misconfigured SSO and email spoofing turned into a way to join internal tickets, steal Slack access and read sensitive conversations – all via a third-party tool many enterprises barely think about. We also dig into how bug bounty programs work, why Zendesk’s scope call sparked controversy, and how SEEK runs security exercises to stay ahead of attackers.
In this episode you’ll learn: • How the exploit actually worked end-to-end – from Zendesk ticket IDs and CC’ing yourself onto “internal” threads, to chaining Apple/Google OAuth and Slack login for access to private workspaces. • Why the bug bounty outcome was so controversial – how email-spoofing being “out of scope” left Daniel unpaid by Zendesk, and what this means for incentivising white-hat behaviour vs pushing hackers towards greyer choices. • Practical security takeaways for engineers – the real risk of “weakest link” third-party tools, why internal channels are goldmines for social engineers, and how separation of concerns and well-designed bounties can protect both your systems and your customers.
Whether you’re in software engineering, security, cloud, support, architecture or IT leadership, this episode is a gripping case study in modern attack chains, bug bounty programs and why “it’s just email” or “it’s just a ticketing tool” is never the whole story.
👍 Follow the SEEK Bytes podcast so you never miss a new episode
More from SEEK Bytes
This special Season 3 finale of SEEK Bytes – a podcast for engineers by engineers – dives into one of the biggest AI engineering shifts of the moment: spec-driven development with GitHub Spec Kit. If you’ve been wondering how teams are using AI for more than just code completion, this episode unpacks a workflow designed to help engineers plan better, reduce drift and build higher-quality software faster.
What happens when you give 100 high school students four days, real SEEK mentors and a crash course in how tech actually works? In this episode of SEEK Bytes – we're joined by special guests Asha Ioculari and Leon Belobrov and go behind the scenes of Camp SEEK, SEEK’s immersive program designed to open the doors of tech to girls and non-binary students and show them there’s far more to this industry than just writing code. From design thinking and user research to pitching in front of 200+ people and senior SEEK leaders, this is a brilliant look at how SEEK is building confidence, broadening horizons and helping shape a more inclusive future for tech.
Ever shipped a UI that “works” but still feels clunky, janky or confusing to users? In this episode of SEEK Bytes, Elliott and Will chat with lead engineer Eddy Nguyen about Bleeds – a simple but powerful way to design every UI state your users actually experience, not just the happy path.
AI might look simple on the surface — just send a prompt, get a response — but behind the scenes, there’s a whole platform challenge to solve. In this episode of SEEK Bytes – we’re joined by Thet Ko, Senior Staff Engineer in SEEK’s AI Platform Services team, to unpack how SEEK is building an AI Gateway to centralise AI calls, improve governance and make it easier for teams to build with AI without reinventing the foundations every time. From cost visibility and PII protection to guardrails, resilience and shared memory across agents, this episode lifts the lid on the platform work that makes enterprise AI actually usable at scale.
AI is moving fast — but are we building it responsibly? In this episode of SEEK Bytes – we sit down with Sreyna Rath, CEO and co-founder of jaimee.ai, who arrived in Australia as a refugee and is now running her own AI company with the aim to create something truly transformative for women. Elliott sits down with Reyna to unpack her journey and the real-world risks of AI bias, why safety can’t be bolted on at the end, and what developers can do to build tools that are fairer, safer and more human from day one. From biased hiring systems to sexualised image outputs and AI companions designed for vulnerable users, this conversation is a powerful reminder that AI doesn’t just reflect technology — it reflects us.