Anand Prakash, a Bangalore based White Hat hacker who also works as security analyst in Flipkart was awarded a whooping sum of ₹10 Lakhs ($15,000) from Facebook for reporting a bug. The flaw could put users private data such as pictures, debit and credit card data, messages into the hands of cyber criminals.
According to Anand, When a user forgets his password he would opt for forget password option by Facebook which in turn sends a 6 digit recovery code to the user mobile number or email id. Anand tried to brute the 6 digit code by himself.Fortunately the facebook.com which we uses did not allow users to have n number of trials.It blocks after 10-12 attempts but unfortunately beta.facebook.com and mbasic.beta.facebook.com dont have any limit which can make hackers to hack any account by this method.
He himself tried on his own account and successfully hacked his own account (as per Facebook's policy you should not do any harm on any other users account).Then Anand reported Facebook about the serious bug on February 22 and received a bounty of $15,000 (₹10 Lakh approx) on March 2 and yes Facebook rectified this bug.This is not the first time he is receiving reward for stating bugs.He already earned about ₹1.4 Crore till date.Anand has been awarded for finding bugs by many big sites such as Dropbox, Google, Zomato, Instagram, Nokia, RedHat, Adobe, PayPal.
Below is the video of how Anand Prakash hacked his own account.
No comments:
Post a Comment