News for hackers. Stuff that matters.

A comment on Identify a Facebook user by his phone number despite privacy settings set.

Re:Identify a Facebook user by his phone number despite priv... by 1vuio0pswjnm7 on Tuesday May 18, 2021 @12:25AM (#27191247)
Is it me or does that look extremely easy to reproduce. Easiest $9K in bug bounties I have seen. Must have been more to discovering it than just observing traffic and composing HTTP.
[ Parent | on HN ]
Re:Identify a Facebook user by his phone number despite priv... by hnarn on Tuesday May 18, 2021 @03:41AM (#27192139)
A bugs value is due to its impact, not how hard it is to reproduce. And there may have been a lot of initial research involved, who knows. Still, the money isn't paid for time spent.
[ Parent | on HN ]