Facebook is paying cash rewards if you find vulnerabilities in third-party apps

The recent Cambridge Analytica scandal rocked Facebook, prompting the company to examine more closely where its masses of user data ends up and how it’s utilized.

As part of those efforts, the social networking giant this week announced it’s expanding its bug bounty program to include third-party apps and websites that let people use their Facebook accounts to log in.

The company says it’s focusing on the access tokens that are uniquely generated for the specific user and app during login.

“The user decides what information the token and app can access as well as what actions can be taken … [but] a token can potentially be misused,” Dan Gurfinkel, Facebook security engineering manager, explained in a post announcing the expanded program.

Gurfinkel said it will pay at least $500 to anyone who spots vulnerabilities that involve “improper exposure of Facebook user access tokens.” The more serious the issue, the greater the amount Facebook will pay, though it makes no mention of a cap.

He added that Facebook is using the program in an effort to create a clear channel for people to report any issues they come across, “and we want to do our part to protect people’s information, even if the source of a bug is not in our direct control.”

Once an issue has been confirmed by Facebook’s own researchers, it will contact the app or website developer to help them fix their code, and they’ll be suspended from the platform until the issue has been resolved.

“We will also automatically revoke access tokens that could have been compromised to prevent potential misuse, and alert those we believe to be affected,” Gurfinkel said.

The security engineering manager pointed out that Facebook will only accept reports “if the bug is discovered by passively viewing the data sent to or from your device while using the vulnerable app or website.” In other words, researchers are not allowed to “manipulate any request sent to the app or website from your device, or otherwise interfere with the ordinary functioning of the app or website in connection with submitting your report.”

If a flaw is reported by two people working independently of each other, the payment goes to the person who submits the report first. And if the researcher is feeling generous and would like to donate the bounty to charity, Facebook will double the value of the donation.

The expansion of its bug bounty program comes four months after Facebook launched the Data Abuse Bounty Program, another consequence of the damaging Cambridge Analytica scandal in which a third-party app helped to harvest the data of up to 87 million Facebook users for political gain, which led to big questions over the way the social networking company handled user data.

The Data Abuse Bounty program rewards users who discover and report any app or service connected to Facebook that misuses data, specifically, where “a Facebook platform app collects and transfers people’s data to another party to be sold, stolen, or used for scams or political influence,” the company said.

Facebook described its Data Abuse Bounty Program as an industry first.

Outdoors

Is Uber planning to put its self-driving tech into bikes and scooters?

Uber reportedly has its eye on building autonomous electric bikes and scooters that ride to a user when summoned by an app. The technology could also be used to make its two-wheelers safer with obstacle avoidance systems.
Emerging Tech

Forget fireworks. Japan will soon have artificial meteor showers on tap

Tokyo-based startup Astro Live Experiences is preparing to launch its first artificial meteor shower over Japan, serving as a showcase of its prowess in the space entertainment sector.
Social Media

Nearly 75 percent of U.S. users don’t realize Facebook tracks their interests

Did you know Facebook tracks your interests, including political and multicultural affiliations? According to a recent Pew study, 74 percent of adult users in the U.S. have no idea Facebook keeps a running list of your interests.
Apple

Apple may be developing a new iPod Touch to woo younger users

Apple may be developing its first new iPod touch model since 2015 as it aims to capture younger users who are not yet ready for their own smartphone, and expand its overall listening base in the future.
Social Media

No yolk! A photo of an egg has become the most-liked post on Instagram

Until this weekend, the most-liked post on Instagram was of Kylie Jenner's baby daughter, which has around 18 million likes. It's now been knocked off the top spot not by a stunning sunset or even a cute cat, but by an egg.
Social Media

Invite your friends — Facebook Events can now be shared to Stories

Facebook is testing a way to make plans with friends to attend an event -- through Stories. By sharing an event in Facebook Stories, users can message other friends interested in the event to make plans to attend together.
Social Media

A quick swipe will soon let you keep bingeing YouTube on mobile devices

The YouTube mobile app has a new, faster way to browse: Swiping. Once the update rolls out, users can swipe to go to the next (or previous) video in the recommended list, even while viewing in full screen.
Photography

Starting your very own vlog? Here are the best cameras to buy

Any camera that shoots video can be used to vlog, but a few models stand out from the crowd thanks to superior image quality, ergonomics, and usability. When it comes to putting your life on YouTube, here are the best cameras for the job.
Social Media

Twitter extends its new timeline feature to Android users

Twitter users with an Android device can now quickly switch between an algorithm-generated timeline and one that shows the most recent tweets first. The new feature landed for iPhone users last month.
Social Media

YouTube to crack down on dangerous stunts like the ‘Bird Box’ challenge

YouTube already bans content showing dangerous activities, but new rules published by the site go into greater detail regarding potentially harmful challenges and pranks, including certain blindfold- or laundry detergent-based stunts.
Mobile

It’s back! Here’s how to switch to Twitter’s reverse chronological feed

Twitter has finally brought back the reverse chronological feed, allowing you to see your feed based on the newest tweets, rather than using Twitter's algorithm that shows what it thinks you want to see. It's easy to switch.
Social Media

Nearly a million Facebook users followed these fake Russian accounts

Facebook purged two separate groups behind more than 500 fake accounts with Russian ties. One group had ties to Russian news agency Sputnik, while the other had behavior similar to the Internet Research Agency's midterm actions.
Social Media

Twitter suffers privacy scare as bug reveals tweets of protected accounts

If you set your Twitter account to private and you have an Android device, you'd better check your settings now. Twitter says it's just fixed a four-year-old bug that flipped the privacy switch to make the account public.
Web

Switch up your Reddit routine with these interesting, inspiring, and zany subs

So you've just joined the wonderful world of Reddit and want to explore it. With so many subreddits, however, navigating the "front page of the internet" can be daunting. Here are some of the best subreddits to get you started.