Facebook rewarded a 10-year-old for finding Instagram security flaw

Re:Facebook rewarded a 10-year-old for finding Instagram sec... by tptacek on Tuesday May 03, 2016 @05:52PM (#11624533)

There are no Facebook vulnerabilities that have a value any higher than what Facebook is going to pay for them.

If Facebook was sending t-shirts instead of writing 4-5 figure checks, these discussions would be more interesting. But that's not what Facebook does.

Put it this way: before Facebook started these bounty programs, what do you think the price sheet for Facebook bugs on the "black market" looked like?

[ Parent | on HN ]

Re:Facebook rewarded a 10-year-old for finding Instagram sec... by Buge on Tuesday May 03, 2016 @06:57PM (#11624905)

Well the NSA tapped into Google's internal datacenter traffic to steal user information. So some vulnerabilities like that might be useful to them.

https://cms-images.idgesg.net/images/article/2014/06/googles...

[ Parent | on HN ]

Re:Facebook rewarded a 10-year-old for finding Instagram sec... by tptacek on Tuesday May 03, 2016 @07:36PM (#11625090)

I'm having trouble connecting your first sentence to your second. It sounds a little like saying "so, the US army has M109 Howitzers, so maybe they'd be interested in this 3D-printed zip gun I just made."

[ Parent | on HN ]

Re:Facebook rewarded a 10-year-old for finding Instagram sec... by Buge on Tuesday May 03, 2016 @08:53PM (#11625426)

I'm not talking about the vulnerability that this kid found. I'm talking about vulnerabilities that would allow access deep into the Facebook infrastructure. I think there are in fact some vulnerabilities the NSA would be willing to pay more than $10k for if it would allow them long term access to a lot of sensitive Facebook data.

[ Parent | on HN ]