Slashdot Mirror
Security Researcher Makes His Point By Hacking Into Zuckerberg's Facebook Page
Eugriped3z writes "Whitehat Palestinian hacker Kahlil Shreateh submitted a bug report to Facebook's Whitehat bug reporting page not once, but twice. After it was ignored the first time and denied outright on the second occasion (which included links to an example as proof), he hacked Mark Zuckerberg's personal timeline, leaving both an explanation and an apology. From the article: 'In less than a minute, Shreateh's Facebook account was suspended and he was contacted by a Facebook security engineer requesting all the details of the exploit. 'Unfortunately your report to our Whitehat system did not have enough technical information for us to take action on it,' the engineer wrote in an email. 'We cannot respond to reports which do not contain enough detail to allow us to reproduce an issue.' Facebook has a policy that it will pay a minimum $500 bounty for any security flaws that a hacker finds. However, the company has refused to pay Shreateh for discovering the vulnerability because his actions violated Facebook's Terms of Service.'"
Incidentally I was just reading about the issue... Market research numbers from last year.
$5000 - $30,000 Adobe Reader
$20,000 - $50,000 Mac OSX
$30,000 - $60,000 Android
$40,000 - $100,000 Flash or Java Browser Plug-Ins
$50,000 - $100,000 Microsoft Word
$60,000 - $120,000 Windows
$60,000 - $150,000 Firefox or Safari
$80,000 - $200,000 Chrome or IE
$100,000 - $250,000 iOS