Advertisement


Advertisement

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Breaking News : Bengaluru-based hacker Anand finds bug in Facebook login system; rewarded $15000
#1
Advertisement
Bengaluru-based Anand Prakash found a vulnerability on Facebook which could have been used to hack into any user account easily without any user interaction. This could give full access to view messages, credit/debit cards stored under payment section, personal photos and much more.
According to a post on Prakash’s blog , he stated that, “Whenever a user forgets his password on Facebook, he has an option to reset the password by entering his phone number/email address and Facebook will then send a 6 digit code on his phone number/email address, which can be used in order to set a new password.” He added that he tried to brute the 6 digit code on Facebook and was blocked after 10-12 invalid attempts.
Prakash looked out for the same issue on beta.facebook.com and mbasic.beta.facebook.com and found that rate limiting was missing on ‘forgot password’ endpoints. He tried to takeover his own account and was successful in setting new password for it as well. With this method, he could then use the same password to login in the account.
Facebook, on its part, acknowledged the issue promptly and fixed it. The hacker was rewarded $15,000 (approximately Rs 10 lakh) considering the severity and impact of the vulnerability.

http://m.tech.firstpost.com/news-analysi...03132.html
Reply
Thanks given by:
Advertisement
Advertisement




Possibly Related Threads...
Thread Author Replies Views Last Post
  General News: Reliance JioPhone gets official Facebook app, here’s what you need to know nairrk 0 360 02-14-2018, 12:01 PM
Last Post: nairrk
  General News: DoT allows Aadhaar based eKYC of roaming subscribers in existing circle nairrk 0 354 09-26-2017, 07:47 AM
Last Post: nairrk
  General News: Flipkart’s PhonePe UPI based mobile payment app goes live on Google Play Store rahul1117_kumar 0 257 08-30-2016, 12:35 AM
Last Post: rahul1117_kumar
  General News: Karbonn Fashion Eye, Fashion Eye 2.0 with AI-based fashion search feature launched rahul1117_kumar 0 278 07-27-2016, 10:10 PM
Last Post: rahul1117_kumar
  General News: Facebook Messenger on iOS now supports 3D Touch rahul1117_kumar 0 199 07-14-2016, 03:40 PM
Last Post: rahul1117_kumar
  General News: You can now book a uberPool ride directly from Facebook Messenger rahul1117_kumar 0 342 07-09-2016, 06:03 PM
Last Post: rahul1117_kumar
  Breaking News: Indus OS, the Indian operating system with more installs than iOS rahul1117_kumar 0 316 06-26-2016, 12:25 PM
Last Post: rahul1117_kumar
  Breaking News: Facebook wants users to get Messenger; to soon end chats inside mobile web rahul1117_kumar 0 487 06-05-2016, 02:22 PM
Last Post: rahul1117_kumar
  Breaking News: Facebook Messenger finally gets new diverse emojis rahul1117_kumar 0 395 06-05-2016, 02:14 PM
Last Post: rahul1117_kumar
  Breaking News: Mumbai based Indus OS take second spot beating Apple & Microsoft in smartphone OS mkt rahul1117_kumar 0 311 05-08-2016, 08:56 PM
Last Post: rahul1117_kumar

Forum Jump:


Users browsing this thread: 1 Guest(s)
Advertisement