Contact

I'm Jonathan

EXPERIENCED WEB DEVELOPER, SIGNIFICANT START-UP EXPERIENCE, SECURITY RESEARCHER

Hire me Check my blog 
{
	"Skills": [ 
		"Backend (NodeJS, Lambda)", 
		"Frontend (Javascript, Vue Framework"), 
		"Devops (Amazon Web Services)",
		"Security Research",
	],
	"Startups": [
		{
			"Name": "Hotelkamerveiling.nl",
			"Position": "Lead software developer (backend & frontend)",
			"Date-range": "Jan 2008 – Jan 2011 - 3 years",
		},
		{
			"Name": "Oneplanetcrowd.com",
			"Position": "Lead software developer (backend)",
			"Date-range": "Jun 2014 – Aug 2017 - 3 years",
		},
	],	
	"Security Research": ["Winner of the Hackerone.com Live Event h1-2103 - MVH Belt & 1st Prize","Apple.com", "Netflix.com", "IKEA.com", "LinkedIn.com",
	"Philips.nl", "Amazon.com", "Bol.com", "AH.nl", "Zoom.us", "Medium.com"],
	"Press": ["Techcrunch", "CNN Fortune", "Tweakers.net", 
		"Reddit Frontpage", "Hackernews Frontpage"]
}

Blog

My perspective on coding, design, startups & security

Persistent XSS (Unvalidated oEmbed) at Medium.com

A full write-up about an unvalidated oEmbed bug that caused stored XSS at Medium.com Furthermore a discussion about the new CVD guideline.

Jonathan Bouman

Oct 4 · 9 min read
Local file inclusion at IKEA.com

A write-up about a PDF bug that allowed one to steal files from an IKEA production server. Furthermore a discussion about non-disclosure.

Jonathan Bouman

Oct 4 · 9 min read
Reflected XSS at Philips.com

A full write-up; reflected XSS was possible because the debug mode of Adobe Experience Manager was enabled in production.

Jonathan Bouman

Oct 4 · 9 min read

I work for large brands, small enterprises and startups I believe in. During midnights I tend to build mashups and hunt security bugs.

I've been featured on

{
  "Press": [
    {
      "Site": "Apple.com",
      "Title": "Security Hall of Fame",
      "Url": "https://support.apple.com/en-is/HT201536",
      "Date": "Jun 2018",
      
    },
    {
      "Site": "Techcrunch.com",
      "Title": "Scrolldit: I Heard You Liked Scrolling Reddit So I Put Scrolling In Your Reddit",
      "Url": "https://techcrunch.com/2011/10/25/scrolldit-i-heard-you-liked-scrolling-reddit-so-i-put-scrolling-in-your-reddit/",
      "Date": "Oct 2011",
      
    },
    {
      "Site": "CNN Fortune",
      "Title": "YouTube innovations prove beneficial for developers",
      "Url": "http://fortune.com/2010/09/24/youtube-innovations-prove-beneficial-for-developers/",
      "Date": "Sept 2010",
      
    },
    {
      "Site": "Geek.com",
      "Title": "ListandPlay, an awesome YouTube Instant spin off that lets you create and share video playlists",
      "Url": "https://www.geek.com/news/listandplay-an-awesome-youtube-instant-spin-off-that-lets-you-create-and-share-video-playlists-1285369/",
      "Date": "Sep 2010",
      
    },
    {
      "Site": "Techcrunch.com",
      "Title": "Scrollsy Is A Scrollable, Pinterest-Like Version Of Etsy",
      "Url": "https://techcrunch.com/2012/01/13/scrollsy-is-a-scrollable-pinterest-like-version-of-etsy/",
      "Date": "Jan 2012",
      
    },
    {
      "Site": "Hackernews YCombinator",
      "Title": "Show HN: Scroll Reddit",
      "Url": "https://news.ycombinator.com/item?id=3196766",
      "Date": "Nov 2011",
      
    },
    {
      "Site": "Tweakers.net",
      "Title": "Nederlander vermengt YouTube en Last.fm met Google Instant",
      "Url": "https://tweakers.net/nieuws/70405/nederlander-vermengt-youtube-en-last-punt-fm-met-google-instant.html",
      "Date": "Oct 2010",
      
    },
    {
      "Site": "Emerce.nl",
      "Title": "Nederlandse Google Instant spin-off onbedoeld succes",
      "Url": "https://www.emerce.nl/nieuws/nederlandse-google-instant-spin-off-onbedoeld-succes",
      "Date": "Oct 2010",
      
    },
    {
      "Site": "Reddit.com",
      "Title": "I built you /r/Pics on steroids",
      "Url": "https://www.reddit.com/r/pics/comments/larwj/i_built_you_rpics_on_steroids/",
      "Date": "Oct 2011",
      
    },
    {
      "Site": "Bright.nl",
      "Title": "Sneller door Reddit met ScrollDit",
      "Url": "https://www.bright.nl/nieuws/artikel/4045571/sneller-door-reddit-met-scrolldit",
      "Date": "Oct 2011",
      
    },
    {
      "Site": "TheDailyDot.com",
      "Title": "Scrolldit makes Reddit pretty",
      "Url": "https://www.dailydot.com/culture/scrolldit-image-interface-reddit-jonathan-bouman/",
      "Date": "Oct 2011",
      
    },
    {
      "Site": "925.nl",
      "Title": "Nederlandse student gaat viral vanaf zolderkamer",
      "Url": "http://925.nl/archief/2011/10/26/nederlandse-student-gaat-viral-vanaf-zolderkamer",
      "Date": "Oct 2011",
      
    },
    
  ]
}

Say hello!

In need of advice or just want to drink a cup of coffee and share thoughts? Feel free to say hello! I'll respond as soon as possible.

Drop me a line :-)

Company information

T 00 31 614707160 - 1e Jacob van Campenstraat 18/3A 1072BE Amsterdam The Netherlands - Jonathan@Protozoan.nl - Time zone UTC / GMT +1 - Bank: NL61 BUNQ 2039 0452 79 - KVK: 34254285