Hi PH! I'm Vitor. I found a hole in my university's app, and that's how I met my cofounder

Hi everyone! I'm Vitor, a developer and student at UFRN, in Brazil.

Earlier this year I wanted to build an AI assistant that could see my classes and grades, so I started looking at how my university's mobile app talked to its server. I found a search endpoint that returned the personal data of every registered user.

I didn't touch anyone's data. I emailed the university's IT team, got on a call with their IT director, and they were great about it: they thanked me and even invited me to apply to join them. Nothing leaked.

I wrote about it on r/secbr, in Portuguese. Reddit translated the post into German, and that's how Derya found me. Today she's my cofounder, and we're building friends67 together: a screen time app where a friend has to approve your extra time. We launch here on Saturday.

Has anyone else met a cofounder somewhere this unexpected?