Facebook pays $15,000 bounty to close bug that can access any user’s account

facebook jobs tab woman using
A major flaw in Facebook’s account security has been brought to light by a security researcher, who has received a cool $15,000 payout from the social network for his efforts.

Anand Prakash spotted the flaw, which allowed him access to any user’s account on the platform, last month. The bug was related to the Facebook account reset process, which results in the site sending a six-digit PIN to a user’s phone to be used as a temporary password.

Usually, the individual resetting an account is granted approximately 10-12 wrong password guesses. Prakash noticed that those security measures were missing from the Facebook beta site for developers, where every single user account is also readily available. Consequently, the bug allowed Prakash to seemingly flood the site with PIN guesses, and hack into any account he wanted.

Instead of exploiting the flaw, however, Prakash notified Facebook through its report vulnerability page. The following day, the social network confirmed that the bug occurred due to a change to the beta page a few days earlier. Although Facebook assures that the flaw was not misused in that time frame, it still felt compelled to pay the $15,000 bug bounty to Prakash.

The resulting award and Facebook’s rapid response in stamping out the bug hints at the major risk involved. It may not have been the most complicated security issue, but it could have resulted in complete chaos if utilized through the site’s main page.

“One of the most valuable benefits of bug bounty programs is the ability to find problems even before they reach production,” Facebook said in a statement to The Verge. “We’re happy to recognize and reward Anand for his excellent report.”

Since its inception, Facebook’s bug bounty program has forked out over $4 million to hackers and security researchers for responsibly disclosing issues in its system.

Computing

Facebook’s crypto isn’t a new Bitcoin, it’s Disney Dollars for a new world order

Facebook has already secured tens of millions in investments for its new cryptocurrency for Facebook known as Libra. The platform is still being developed, but has already brought in backing from Visa, Mastercard and PayPal.
Computing

What is Libra? Here’s what you need to know about Facebook’s new cryptocurrency

Facebook released a white paper announcing its new cryptocurrency, Libra, which it intends as a way to enable more people around the world to process online payments. Here's how the new blockchain technology works.
Mobile

Galaxy Fold's screen problems have mostly been fixed, Samsung says

The Samsung Galaxy Fold is real, but for how long? Folding out from a 4.6-inch display to a tablet-sized 7.3-inch display, this unique device has six cameras, two batteries, and special software to help you use multiple apps.
Mobile

Need a do-over? Here's how to factory reset an iPhone, from XS on down

Resetting an iPhone can alleviate all sorts of software woes, and wipe away personal data should you sell your device or give it to someone else. Here's how to factory reset an iPhone from within iOS or iTunes.
Social Media

Zuckerberg may have known more about Facebook’s privacy scandal than we thought

In the midst of an ongoing investigation into Facebook's Cambridge Analytica privacy scandal, a new report suggests that Facebook founder and CEO Mark Zuckerberg may have known about the company's much-criticized approach to privacy.
Mobile

Bored with your Snapchat username? Here's how to change it

We've all been there. You're setting up a new account and just type in whatever pops into your head as a username. Then, later on, you realize that was a mistake. Here's how to change your Snapchat username.
Cars

Tesla screens may support YouTube with next software update

Tesla CEO Elon Musk announced today at E3 that the infotainment screens will support YouTube video streaming very soon. This most likely lines up with the latest software update that is expected later this year.
Mobile

Get together with your buddies, talk, and play games with Snapchat's group chat

You can get your friends together for a good time, even if they are hundreds of miles away, by starting up a group chat on Snapchat. Here's how to make a group chat on Snapchat and get the party started.
Social Media

Instagram is back up after being offline. Here’s the latest on the outage

Instagram finally came back online Thursday afternoon after an outage that lasted just over an hour. The Instagram outage was one of several that hit at the same time, including a several-hour failure at the PlayStation Network.
Social Media

Facebook’s comment-ranking system aimed at taming the dumpster fire

Even by the standards of the internet, Facebook comments are famously awful. Now Facebook is introducing a new comment ranking system to attempt to tackle this problem by promoting quality comments and hiding low quality ones.
Photography

Adobe concocts an A.I. that can detect — and reverse — manipulated photos

The company behind the software that's often used to manipulate photographs may help make it easy to spot a fake photo. Researchers at Adobe recently created an artificially intelligent program that can recognize fake photos of faces.
Social Media

Kim Kardashian can get a deepfake taken off YouTube. It’s much harder for you

YouTube took down an incredibly realistic — and fake — video purporting to show Kim Kardashian West discussing a shadowy organization called “Spectre” and mocking her fans for violating copyright.
Social Media

Maybe you missed something, so here's how to take another look at that Snap

The people you follow on Snapchat are important to you. If you get frustrated when you're trying to look at a friend's Snap or Story and it disappears, here's how to replay a Snapchat message or post.
How-To

You can delete Snapchat messages in a snap with these simple tips

If you've ever sent a message to someone and wish you could delete it, Snapchat has a feature you'll like. Yes, it lets you delete messages you've already sent. There are some limitations, though. Here's how to delete Snapchat messages.