HNGlance

Top Best New Show

Security researcher penalised $3750 by Facebook for verifying vulnerability

https://philippeharewood.com/bulletin-com-email-address-leak/

by kailanb • 5 years ago

46 3 5 years ago

PH

philippeharewood.com

Related Stories

Loading related stories...

Comments

3

executive• 5 years ago

Seems you did not disclose this over the Facebook Portal Smart Video Calling Touch Screen. Consider yourself lucky they did not deduct $7000 instead.

some_chap• 5 years ago

Hmm, so they reported it to FB & apparently had the vuln confirmed but then retested the vuln a couple of times at 12h & 22h after reporting/confirmation, with the implication that each time they were exposing other user's data...

Not too surprised they reduced the award, tbh...

1B05H1N• 5 years ago

Sucks but it goes against their bug bounty tos facebook.com/whitehat.

It's sorta bad to punish folks who have been helping secure the org for a while (in my opinion).

Source preview

philippeharewood.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms