Deleting any Facebook album
7xter.com
Deleting any Facebook album
1–10 of 107 posts
Re: Deleting any Facebook album
#2Nice! Easy $12500. I'm kicking myself but then again, who woulda thunk?
Re: Deleting any Facebook album
#3Holy heck, $12.5K? That's one heck of a nice bug bounty program Facebook has there. That is likely more than the black market would pay for this, or at least a lot less hassle (plus the black market might have little interest as this cannot be used for hijackings, just trolling/harrassment).
Re: Deleting any Facebook album
#4That seems a princely sum of money, but then again, this was a pretty serious flaw. Kudos!
Re: Deleting any Facebook album
#5If $12,500 seems like a lot of money, remember that Facebook theoretically loses $22,453 for every minute their website is down. In other words, they generate $12,500 every 33 seconds.
Paying out that sum of money to increase the number of people searching for security flaws is quite smart.
Re: Deleting any Facebook album
#6If $12,500 seems like a lot of money, remember that Facebook theoretically loses $22,453 for every minute their website is down. In other words, they generate $12,500 every 33 seconds. Paying out that sum of money to increase the number of people searching for security flaws is quite smart.
[deleted]
Re: Deleting any Facebook album
#7That was brilliant :)
Re: Deleting any Facebook album
#8I'm not 100% sure on this, could you only delete albums for users who had given access to your app, or was it any user at all?
Re: Deleting any Facebook album
#9If $12,500 seems like a lot of money, remember that Facebook theoretically loses $22,453 for every minute their website is down. In other words, they generate $12,500 every 33 seconds. Paying out that sum of money to increase the number of people searching for security flaws is quite smart.
[deleted]
[deleted]
Re: Deleting any Facebook album
#10Holy heck, $12.5K? That's one heck of a nice bug bounty program Facebook has there. That is likely more than the black market would pay for this, or at least a lot less hassle (plus the black market might have little interest as this cannot be used for hijackings, just trolling/harrassment).
[deleted]