Facebook pays for security loopholes Skip to main content

Facebook pays for security loopholes

Smashed window, Getty Facebook has paid $5000 to those who found the biggest security holes in its site

Related Stories

Facebook has spent $40,000 (£25,000) in the first 21 days of a program that rewards the discovery of security bugs.
The bug bounty program aims to encourage security researchers to help harden Facebook against attack.
One security researcher has been rewarded with more than $7,000 for finding six serious bugs in the social networking site.
The program runs alongside Facebook's efforts to police the code it creates that keeps the social site running.
A blog post by Facebook chief security officer Joe Sullivan revealed some information about the early days of the bug bounty program.
He said the program had made Facebook more secure by introducing the networking site to "novel attack vectors, and helping us improve lots of corners in our code".
The minimum amount paid for a bug is $500, said Mr Sullivan, up to a maximum of $5000 for the most serious loopholes. The maximum bounty has already been paid once, he said.
Many cyber criminals and vandals have targeted Facebook in many different ways to extract useful information from people, promote spam or fake goods.

“Start Quote

It's hardly surprising that the service is riddled with rogue apps and viral scams”
Graham Cluley Sophos
Mr Sullivan said Facebook had internal bug-hunting teams, used external auditors to vet its code and ran "bug-a-thons" to hunt out mistakes but it regularly received reports about glitches from independent security researchers.
Facebook set up a system to handle these reports in 2010 which promised not to take legal action against those that find bugs and gave it chance to assess them.
Paying those that report problems was the logical next step for the disclosure system, he said.
Graham Cluley, senior technology consultant at Sophos, said many other firms, including Google and Mozilla, run similar schemes that have proved useful in rooting out bugs.
However, he said, many criminally-minded bug spotters might get more for what they find if they sell the knowledge on an underground market.
He added that the bug bounty scheme might be missing the biggest source of security problems on Facebook.
"They're specifically not going to reward people for identifying rogue third party Facebook apps, clickjacking scams and the like," he said. "It's those sorts of problems which are much more commonly encountered by Facebook users and have arguably impacted more people."
Facebook should consider setting up a "walled garden" that only allowed vetted applications from approved developers to connect to the social networking site, he said.
"Facebook claims there are over one million developers on the Facebook platform, so it's hardly surprising that the service is riddled with rogue apps and viral scams," he said.

http://www.bbc.co.uk/news/technology-14715442
Labels:

Comments

Post a Comment

Popular posts from this blog

Sri Bhaddanta Chandramani Mahathera

The Life Story of A Distinguished And Outstanding Bhikkhu The Most Venerable Saradawpharagree Sri Bhaddanta Chandramani Mahathera The Buddhist missionary Saradaw Ashin U Chandramani was endowed with great gifts and led a famous and long life. He was a very well known, distinguished and outstanding Bhikkhu Mahathera. While living in the Kushinagar Monastery, a place close to where the Lord Buddha had passed away to Nirvana, the Government of India had offered, and he had accepted, the highest, most honourable and respected title "Guru Guru MahaGuru". He became the first ever President of all Buddhists in India.A World Buddhist Conference took place in Kathmandu during the reign of King Mahindra of Nepal. The Conference was very well attended by over one hundred thousand Buddhists from various parts of the world and it was opened by King Mahindra himself. As requested by the King, Saradawpharagree blessed all the participants with the power of Triple Gems...
Post a Comment
Read more

Thai penis whitening trend raises eyebrows

Image copyright LELUXHOSPITAL Image caption Authorities warn the procedure could be quite painful A supposed trend of penis whitening has captivated Thailand in recent days and left it asking if the country's beauty industry is taking things too far. Skin whitening is nothing new in many Asian countries, where darker skin is often associated with outdoor labour, therefore, being poorer. But even so, when a clip of a clinic's latest intriguing procedure was posted online, it quickly went viral. Thailand's health ministry has since issued a warning over the procedure. The BBC Thai service spoke to one patient who had undergone the treatment, who told them: "I wanted to feel more confident in my swimming briefs". The 30-year-old said his first session of several was two months ago, and he had since seen a definite change in the shade. 'What for?' The original Facebook post from the clinic offering the treatment, which uses lasers to break do...
1 comment
Read more

Three Dead, Seven Injured by Artillery Shells in Two Incidents in Myanmar’s Mrauk-U

By MIN AUNG KHINE 2 December 2019 Sittwe, Rakhine State –Three Mrauk-U township residents died and four others were injured when an artillery shell struck their community in the Ale Zay quarter of Mrauk-U town on Monday afternoon after 4 p.m. A month-old girl, a 4-year-old boy and a 30-year-old woman died, according to Dr. Khin Maung Yin, the head of Mrauk-U hospital. He said, “A man and three other women were injured. One of the women sustained severe injures to her left leg and her right knee was dislocated. The injured will be operated on.” Details of what occurred were not yet known. A few hours earlier, three civilians were injured when an artillery shell fell on the village of Na Leik in Mrauk-U Township, Rakhine State, western Myanmar, on Monday at around 1 p.m., according to Yan Aung Pyin village-tract administrator U Sein Hla Aung. Two females, aged 13 and 27, and an 18-year-old male were injured in the incident, he said. Three people were hit by shrapnel and we have...
Post a Comment
Read more