Page 36 - Bug Bounty Program News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Saugat Pokharel, an experienced bug hunter from Nepal, discovered the bug. The attack used Facebook's Business Suite tool, available to any Facebook business account, reports The Verge. Pokharel found that the attack worked on accounts that were set to private and accounts that were set to not accept DMs from the public. "If an account did not accept DMs, the user potentially would not receive any notification indicating their profile may have been viewed," the report said on Friday. Facebook patched the vulnerability after being reported. According to a Facebook spokesperson, the bug wa...

A Facebook bug exposed Instagram users’ personal email addresses and birthdays Mitchell Clark © Illustration by Alex Castro / The Verge When signing up for an Instagram account, the service promises that your email and birthday won’t be publicly visible. A bug discovered by security researcher Saugat Pokharel, however, made it so that an attacker could easily get that private information. The bug, which was patched after being reported to Facebook, was exploitable by business accounts that were given access to an experimental feature the company was testing. The attack ...

Some of your friends information with you. you're only bringing your own and you're able to connect with friends who have authorized it directly. >> let me turn to the bug bounty program. our subcommittee has had a hearing. your press release indicated that was one of the six changes facebook initially offered to crack down on abuses. rewarding outside parties who find vulnerabilities. one concern i have regarding the utility of this approach is the vulnerability disclosure programs are normally geared toward identifying unauthorized access to data. not pointing out data sharing arrangements t...

Doumd the latest ios to make sure they have the middle east recent security updates. is this a mad scramble to make sure people are protected or have they been working on this over time? >> what's happening now is more organizations are encouraging outsiders to find flaws in their programs. the defense department's bug bounty program. private companies are doing something like that. help us find our own bugs. >> hack our stuff to find our bugs. >> so we can prepare. a lot of the tools you might have been seeing in the release have already been patched not only from apple but others because the...