News for hackers. Stuff that matters.

A comment on Facebook rewarded a 10-year-old for finding Instagram security flaw.

Re:Facebook rewarded a 10-year-old for finding Instagram sec... by danjoc on Tuesday May 03, 2016 @07:44PM (#11625125)
$10,000? Not to diminish what this child did in any way, but that is 4x what the person received who obtained access to

Static site content

Source code

SSL key pairs

iOS and Android app signing keys

iOS push notification keys

Email server credentials

Twitter, Facebook, Tumblr, Foursquare, and Flickr API keys

http://exfiltrated.com/research-Instagram-RCE.php

[ Parent | on HN ]
Re:Facebook rewarded a 10-year-old for finding Instagram sec... by onewaystreet on Tuesday May 03, 2016 @09:43PM (#11625588)
Because he broke the rules: https://www.facebook.com/notes/alex-stamos/bug-bounty-ethics...
[ Parent | on HN ]
Re:Facebook rewarded a 10-year-old for finding Instagram sec... by danjoc on Wednesday May 04, 2016 @12:21PM (#11629432)
I believe that particular opinion has been discussed to death here before, so I won't address it.

The point I was trying to make is the market value seems wildly different from what Facebook pays out. The pricing gives me the impression that Facebook's bug bounty program is more concerned with public relations than it is about improving Facebook security.

[ Parent | on HN ]