He could have made test accounts with appropriate privacy settings. He could have just told the security team, "Your server does not validate permissions when posting to walls, so if you change this specific HTML form value to anyone else's profile ID, it will post to their wall."
It's pretty freaking obvious there was a language barrier problem here. He knew of the whitehat program, but not the ability within it to create test accounts: he asks the security team to set up a test account so he can post to it to show them the problem.
If you pay them, Indians will work hard and get things done. My last startup used a lot of Indian labor. My next one probably will too, once it reaches the point of needing it.
Can't see any reason I'd try to hire labor in France. Sounds expensive and painful.
Talking about hard work, a lot of people in India have this perception that working for long hours is working hard and many times they end up working long hours with very less productivity.In IT companies in India , it has become more of a working culture to work for long hours and no one seems to have any problem with it.
