lol, you ad serving pricks! XD
Will someone send this Khalil Shreateh a brand new quad-core? TIA
Khalil Shreateh - respect. Let your name be indexed once more.
Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
161–170 of 172 posts
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#162Earlier quoted context omitted.
Dismissive and ignored? Did you read what he submitted to them? It made no sense. He vaguely stated that there was a bug and his education. His bug report was nonsensical. I am not even slightly surprised they ignored it. And he violated the TOS before he even ever tried to post to Zuckerberg's wall.
Having dealt with fellow developers that don't have perfect english or thick accents I think it's quite unprofessional to dismiss someone's complaint without even trying to understand them. It's great for us native English speakers that it's such a dominant language but I think we should all give a little more respect for others where it's clearly not their first language and they're the ones having to go out of thei…
It's not about a lack of English language skills.
His English is actually good enough. In the post he posted on Mark's wall you can see the language is good enough and I saw the video interview too where he even spoke well enough.
A technical and step-by-step report was well within his capability.
He could attach screenshots or create a video demonstration.
He used the bug on real users (2 of them!) one of them being Mark Zuckerberg which has obviously created huge negative PR for Facebook.
If someone tests a bug on your Facebook account how happy would you be?
Facebook can't reward someone who used a bug against its users.
On top of that he has damaged their reputation too. Almost all major news sites have written headlines similar to "Palestinian developer hacked Mark Zuckerberg", "Security vulnerability found in Facebook" etc etc which I'm sure they are not super thrilled about.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#163Earlier quoted context omitted.
Holy shit man, I feel bad for you. Having such a distorted view of life must suck. I would try to explain my reasoning but judging by your other replies, it would be a fruitless endeavor.
The lack of a response only suggests that you don't have a counterargument, and I don't blame you, it's hard to counter the obvious.
Its also hard to counter the oblivious. If your concern was efficiency, you would instead promote that everyone learn Lojban (http://en.wikipedia.org/wiki/Lojban). Then at least you would have a regular, computationally parseable, culturally neutral language with unambiguous phonology and finely grained grammatical control. You would also have an established standard (English is not the same everywhere) and no need to appear to be an intolerant racist too since everyone has to learn a language. Plus it would be much much quicker to learn to fluency than English.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#164Although this is blogspam, it's a blogspam that I can actually support... This is being covered a lot more widely because FB didn't just pay the guy. I know it wasn't about money for FB, but this is easily done a lot more damage then they would have expected and because of their inadequate handling of a single bug report, I can only feel satisfied as I think this will go down as a good case study of how not to be so…
This is being covered a lot more widely because it's a distraction.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#165Earlier quoted context omitted.
> Just because he didn't follow unwritten rules of disclosure Are you refering to those unwritten rule that are written here: https://www.facebook.com/whitehat
Someone in another thread pointed out that that page doesn't get translated when you set the language to Arabic, seems likely that the guy just couldn't understand the whitehat TOS for that reason.
I don't view that as a valid excuse not to follow the rules. Admittedly, I don't know any other language than English. But if I was setting out to participate in a bounty program run by a company that didn't have their website in my language... I would most certainly make sure I had someone to tell me what the rules are. Other people have condemned him for not knowing English. I don't fault him for that. But there is no excuse for not knowing the rules.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#166Earlier quoted context omitted.
You would prove nothing other than that crime pays.
Had he sold this exploit, he could've made upwards of $20k-100k. Especially this bug. It allows marketing firms to post to peoples walls without even knowing them. That's a huge vulnerability at the moment when everybodies clamoring for 'social marketing'
I'd suggest that exploits for Facebook wouldn't actually sell that well on the black market. There's only one install of Facebook in the world and it's controlled centrally so can be patched at any time. It's not like an exploit for Windows which can go unpatched for months if people don't install an update - those are worth money because there's a real use case. With a Facebook exploit you'd get a few hours of spamming at best before it's patched and all the crap you posted is deleted - that's probably not worth the money.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#167Earlier quoted context omitted.
Someone in another thread pointed out that that page doesn't get translated when you set the language to Arabic, seems likely that the guy just couldn't understand the whitehat TOS for that reason.
I don't view that as a valid excuse not to follow the rules. Admittedly, I don't know any other language than English. But if I was setting out to participate in a bounty program run by a company that didn't have their website in my language... I would most certainly make sure I had someone to tell me what the rules are. Other people have condemned him for not knowing English. I don't fault him for that. But there is…
You still haven't explained why this matters. Facebook has a lot more responsibility than this developer. Get off your high horse. Even if Facebook wrote down these supposed "rules" they have no authority to enforce them (other then in relation of their supposed bounty program), so it's a moot point.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#168Earlier quoted context omitted.
I don't view that as a valid excuse not to follow the rules. Admittedly, I don't know any other language than English. But if I was setting out to participate in a bounty program run by a company that didn't have their website in my language... I would most certainly make sure I had someone to tell me what the rules are. Other people have condemned him for not knowing English. I don't fault him for that. But there is…
You still haven't explained why this matters. Facebook has a lot more responsibility than this developer. Get off your high horse. Even if Facebook wrote down these supposed "rules" they have no authority to enforce them (other then in relation of their supposed bounty program), so it's a moot point.
It matters because Facebook created their bounty program and created the rules around it. They absolutely have 100% authority to enforce them. There is nothing supposed about either the rules or the bounty program. They are not hypothetical. They both quite obviously exist and links to them prove their existence. I don't really follow what you are arguing. The developer has the responsibility to follow the rules of the program if he wants to participate in the program. He did not. Facebook has the responsibility to enforce the rules of the program. They did. So... yes... this is all moot.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#169Earlier quoted context omitted.
You still haven't explained why this matters. Facebook has a lot more responsibility than this developer. Get off your high horse. Even if Facebook wrote down these supposed "rules" they have no authority to enforce them (other then in relation of their supposed bounty program), so it's a moot point.
It matters because Facebook created their bounty program and created the rules around it. They absolutely have 100% authority to enforce them. There is nothing supposed about either the rules or the bounty program. They are not hypothetical. They both quite obviously exist and links to them prove their existence. I don't really follow what you are arguing. The developer has the responsibility to follow the rules of t…
but this thread isnt about the bounty program.
Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer
#170Earlier quoted context omitted.
It matters because Facebook created their bounty program and created the rules around it. They absolutely have 100% authority to enforce them. There is nothing supposed about either the rules or the bounty program. They are not hypothetical. They both quite obviously exist and links to them prove their existence. I don't really follow what you are arguing. The developer has the responsibility to follow the rules of t…
but this thread isnt about the bounty program.
You brought up the rules of disclosure... not me. And you said they were unwritten... so I was trying to let you know that they are, in fact, written. If you were not talking about the bounty program then I have no idea what rules of disclosure you are talking about and I'll move on.