News for hackers. Stuff that matters.

A comment on Facebook rewarded a 10-year-old for finding Instagram security flaw. Parent comment

Re:Facebook rewarded a 10-year-old for finding Instagram sec... by ssclafani on Tuesday May 03, 2016 @05:48PM (#11624510)
"The problem lay in a private application programming interface (the slice of code allowing certain outside access) that wasn’t properly checking the person deleting the comment was the same one who posted it, the spokesperson added."

http://www.forbes.com/sites/thomasbrewster/2016/05/03/facebo...

[ Parent | on HN ]
Re:Facebook rewarded a 10-year-old for finding Instagram sec... by randyrand on Tuesday May 03, 2016 @06:38PM (#11624821)
I'm hoping the bug was a little more complicated than just "we forgot to check." That's a pretty dumb mistake to make...
[ Parent | on HN ]
Re:Facebook rewarded a 10-year-old for finding Instagram sec... by balls187 on Tuesday May 03, 2016 @07:29PM (#11625052)
Do you see how the PS3 security system was thwarted?[1]

1: http://www.engadget.com/2010/12/29/hackers-obtain-ps3-privat...

[ Parent | on HN ]
Re:Facebook rewarded a 10-year-old for finding Instagram sec... by randyrand on Wednesday May 04, 2016 @09:02PM (#11633218)
Yes, dumb mistakes happen often, but that doesn't make them not dumb.
[ Parent | on HN ]