News for hackers. Stuff that matters.

A comment on Hacker Posts Facebook Bug Report on Mark Zuckerberg’s Wall. Parent comment

Re:Hacker Posts Facebook Bug Report on Mark Zuckerberg’s Wall by unreal37 on Sunday August 18, 2013 @12:59PM (#6233262)
That's not true. There was a very easy way to find and demonstrate this bug without violating the TOS. The TOS clearly says, you can't target someone with your hack without their permission.

The hacker could have created two accounts he owned and controlled, who are not Facebook friends. He could have used one to post to the other's wall. Viola, bug proven and bounty collected.

[ Parent | on HN ]
Re:Hacker Posts Facebook Bug Report on Mark Zuckerberg’s Wall by vpeters25 on Sunday August 18, 2013 @01:55PM (#6233483)
Hackers don't read TOS nor manuals.

Facebook should not expect from whitehats the same standards of bug reporting of their QA department. Most hackers are self-taught, one of the reason they are able to think outside the box and find exploits.

The whitehat program's priority should be to FIND EXPLOITS so they can be patched. Not having every single hacker in the world expend hours reading TOS and instructions on how to properly report such exploit.

Here is a thought: pay him less for not following procedures, but pay him anyways. Or better: pay a bonus to reports that follow proper procedures.

[ Parent | on HN ]
Re:Hacker Posts Facebook Bug Report on Mark Zuckerberg’s Wall by jnbiche on Sunday August 18, 2013 @01:08PM (#6233296)
Yeah, and he breaks their terms of service even there, since you're only supposed to create a single personal account under your true name.
[ Parent | on HN ]
Re:Hacker Posts Facebook Bug Report on Mark Zuckerberg’s Wall by avalaunch on Sunday August 18, 2013 @01:40PM (#6233429)
They have special whitehat accounts which you are allowed to set up for testing. You can have as many of those as you like.
[ Parent | on HN ]
Re:Hacker Posts Facebook Bug Report on Mark Zuckerberg’s Wall by unreal37 on Monday August 19, 2013 @01:35PM (#6238461)
My company creates Facebook apps and have multiple FB accounts for testing purposes. They're not going to kick him off FB for having two accounts, come on.
[ Parent | on HN ]