Chennai-based security researcher Laxman Muthiyah has won $30,000 as a part of a bug bounty programme after he spotted a flaw in Facebook-owned photo-sharing app Instagram.
Chennai-based security researcher Laxman Muthiyah has won $30,000 as a part of a bug bounty programme after he spotted a flaw in Facebook-owned photo-sharing app Instagram.
Muthiyah said the vulnerability allowed him to to “hack any Instagram account without consent permission.”
He discovered it was possible to take over someone’s Instagram account by triggering a password reset, requesting a recovery code, or quickly trying out possible recovery codes against the account.
“I reported the vulnerability to the Facebook security team and they were unable to reproduce it initially due to lack of information in my report. After a few email and proof of concept video, I could convince them the attack is feasible,” Muthiyah wrote in a blog post this week.
Facebook and Instagram security teams fixed the issue and rewarded me $30,000 as a part of their bounty programme, he added.
Paul Ducklin, Senior Technologist at cyber security major Sophos, however, warned while the vulnerability found by Muthiyah no longer existed, users should familiarise themselves with the process of getting back control of their social media accounts, in case they get hacked.
“In case any of your accounts do get taken over, familiarise yourself with the process you’d follow to win them back. In particular, if there are documents or usage history that might help your case, get them ready before you get hacked, not afterwards,” Ducklin said in a statement.
Muthiyah earlier identified not only a data deletion flaw, but also a data disclosure bug on Facebook.
The first bug could have zapped all your photos without knowing your password; the second meant tricking you to install an innocent-looking mobile app that could riffle through all your Facebook pictures without being given access to your account.
“To be clear: he found those holes in compliance with Facebook’s Bug Bounty programme, and he disclosed them responsibly to Facebook,” Ducklin said.
“As a result, Facebook was able to fix the problems before the bugs became public, and (as far as anyone knows) these bugs were patched before anyone else found them,” he remarked.
During the recent Ayush Stakeholder/Industry Interaction meeting at Vanijya Bhawan, the Indian government launched the Ayush Nivesh Saarthi portal
Study conducted by researchers at the University of Illinois at Urbana-Champaign, nanoplastics are dangerous
Election Commission of India (ECI) recently announced that it has improved the Index Card creation process
Experts from the Wildlife Institute of India recently collared three fishing cats in Andhra Pradesh's Coringa Wildlife Sanctuary
Kedarnath-bound chopper makes precautionary landing in Rudraprayag, fourth mishap this season
RBI flags limited policy room after 50 bps rate cut, signals cautious road ahead
Bollywood icon Jeetendra sells 2.3-acre Mumbai Andheri land for ₹855 crore to tech giant
PM Modi opens world’s highest rail bridge, flags off Kashmir’s first Vande Bharat
SC pushes NEET PG to August 3, orders single-shift exam to restore fairness
Elon Musk threatens to pull Dragon spacecraft as feud with Trump escalates
During the recent Ayush Stakeholder/Industry Interaction meeting at Vanijya Bhawan, the Indian government launched the Ayush Nivesh Saarthi portal
Study conducted by researchers at the University of Illinois at Urbana-Champaign, nanoplastics are dangerous
Election Commission of India (ECI) recently announced that it has improved the Index Card creation process
Experts from the Wildlife Institute of India recently collared three fishing cats in Andhra Pradesh's Coringa Wildlife Sanctuary
Kedarnath-bound chopper makes precautionary landing in Rudraprayag, fourth mishap this season
RBI flags limited policy room after 50 bps rate cut, signals cautious road ahead
Bollywood icon Jeetendra sells 2.3-acre Mumbai Andheri land for ₹855 crore to tech giant
PM Modi opens world’s highest rail bridge, flags off Kashmir’s first Vande Bharat
SC pushes NEET PG to August 3, orders single-shift exam to restore fairness
Elon Musk threatens to pull Dragon spacecraft as feud with Trump escalates
Copyright© educationpost.in 2024 All Rights Reserved.
Designed and Developed by @Pyndertech