Sign In

Nat Harward

Product @ TubeBuddy

Nat Harward is an accomplished individual who has dedicated his life to achieving greatness in business, entrepreneurship, and community service. A graduate of Brigham Young University, Harward is the owner of TMB Ventures and has previously served as the President of Intermountain Tri and as a member of KAPPA TAU ALPHA.

Harward is known for his levelheadedness, subtlety, and capability in his endeavors, which has earned him a reputation as a reliable and trustworthy individual. He is a strong believer in hard work and persistence, as evidenced by his mantra to "pound the rock" and do good while having a great time.

Harward's passion for business and entrepreneurship has driven him towards his current role as the owner of TMB Ventures, where he is responsible for overseeing strategic planning, business development, and financial management. He is also an active member of his community, having previously served as the President of Intermountain Tri, a professional organization that promotes the development of the region's entrepreneurs.

Highlights

Apr 23 · linkedin

"What's the primary work output of a product manager?"

Jon Daniels asked me this earlier today. He was happy with his answer for engineers — code — and stymied on an answer for PMs. Best he arrived at: a prioritized backlog.

wdyt?

My answer in comments.

Mar 11 · linkedin

Product Observation of the Week: Fatal flaw in Meta Facebook's hacked account recovery flow

  • Account is hacked
  • Visit facebook . com / hacked to start account recovery
  • Prompt: "Input the email and phone number associated with this account."
  • Result: rejection
  • Why? Algo checks current values, rejects matches to historical ones

Gotta be smarter than the hackers! So easy to exploit this design by changing phone and email of record immediately upon gaining access.

--

A friend is impacted by this flaw right now, and another friend nearly sent a $1,000 deposit for a car listed by the scammer holding the account.

If 3DS2 for e-comm can match a bank's record of device IDs for a customer using their app against the device ID of a checkout attempt ... then FB can do the same for account recovery.

Device ID checks and historical values of email + phone ought to weigh 1,000x over newly written info.

Anna Stepanov - from quick Linkedin search, I see you are PM of Integrity at FB. Maybe this is in your lane. Will you get this notice to the proper team?

--

Added ideas ...

I followed the "Help [a friend] with a hacked account" path to see if I could help. Nope.

Prompt: "Answer a few questions, and we'll help you find the right solution." Input: "Someone else gained access to my friend's account" Response: "Tell them to visit facebook . com / hacked" ... dead-end loop 🤦🏻‍♂️

How about asking me to select my friend and then input their email and phone to further anchor the historical value?

--

Security is tough. Dealing with scammers is a headache. Like George Constanza ... amazing how hard they'll work to not work.

Related Questions

What are some of the key projects Nat Harward has led at TubeBuddy?
How did Nat Harward transition from Brigham Young University to a career in product management?
What challenges has Nat Harward faced in his role at TubeBuddy?
How does Nat Harward's work at TubeBuddy impact the company's monetization strategies?
What skills does Nat Harward bring to his role as a Senior Product Manager at TubeBuddy?
Nat Harward
Nat Harward, photo 1
Nat Harward, photo 2
Add to my network

Location

Salt Lake City, Utah, United States