Indian techie finds flaw in Instagram again, wins $10,000 reward
The new vulnerability that Muthiyah spotted was similar to the one he reported in July and allowed anyone to hack Instagram accounts without consent permission.
Barely a month after winning $30,000 from Facebook for spotting a flaw in Instagram, Chennai-based security researcher Laxman Muthiyah on Monday said he again discovered a new account takeover vulnerability on the photo and video-sharing app. This time he has won $10,000 as part of the social network's bug bounty programme.
The new vulnerability that Muthiyah spotted was similar to the one he reported in July and allowed anyone to hack Instagram accounts without consent permission.
Facebook has now fixed the vulnerability that Muthiyah reported.
"Facebook and Instagram security team fixed the issue and rewarded me $10,000 as a part of their bounty programme," Muthiyah said in a blog post.
Muthiyah found that the same device ID - the unique identifier used by Instagram server to validate password reset codes - can be used to request multiple pass codes of different users.
He showed that this vulnerability can be exploited to hack Instagram accounts.
"You identified insufficient protections on a recovery endpoint, allowing an attacker to generate numerous valid nonces to ten attempt recovery," Facebook said in a letter to Muthiyah.
Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.
RECOMMENDED STORIES
SRH vs GT IPL 2024 Ticket Booking Online: Where and how to buy SRH vs GT tickets online - Check IPL Match 66 ticket price, other details
Top 7 SWP Mutual Funds: Rs 50 lakh investment, Rs 70K monthly pension for 10 years, and Rs 42.30 lakh balance value; know more details
Gold and Silver rate today (May 13, 2024): Precious metal under pressure; yellow metal near Rs 72,400, white metal above Rs 84,600
SIP Returns: How Rs 3,000, 5,000, and Rs 10,000 SIPs can help you build retirement corpus of Rs 1.06 cr, Rs 1.77 cr, and Rs 3.53 cr
02:48 PM IST