*Me and my GF who works for CIA*

Me: Send nudes
GF: Whose do you want ?

*Late night at office*
Was rewriting my stack from angularjs 1 to angularjs 2. Got drowsy and slept.

*Wakes up and opens Hackernews*
Angularjs 4 announced.

How long was I asleep !!

After reading a lot of cryptography, I realized that it would be best if Alice and Bob just talk in person

So Facebook declared millions of people dead ... I guess that's what happens when you test in production

Not exactly a security bug, but there was a company that made a Django app for some internal work and later open sourced it. I was browsing through the code and I saw that the config file had an IP address and a hashed password for the database credentials

When I tried to use them, I was able to login directly to their read replica RDBMS, I had access to all their customer data (including phones & home addresses)
Being the saint I am, I informed them of the ignorance made by their developer and was presented with some cool swag.