Explorer

Chennai Techie Finds Flaw In Instagram Again, Wins $10,000

The new vulnerability that Muthiyah spotted was similar to the one he reported in July and allowed anyone to hack Instagram accounts without consent permission.

Chennai: Barely a month after winning $30,000 from Facebook for spotting a flaw in Instagram, Chennai-based security researcher Laxman Muthiyah on Monday said he again discovered a new account takeover vulnerability on the photo and video-sharing app. This time he has won $10,000 as part of the social network's bug bounty programme. The new vulnerability that Muthiyah spotted was similar to the one he reported in July and allowed anyone to hack Instagram accounts without consent permission. Facebook has now fixed the vulnerability that Muthiyah reported. "Facebook and Instagram security team fixed the issue and rewarded me $10000 as a part of their bounty programme," Muthiyah said in a blog post.
Muthiyah found that the same device ID - the unique identifier used by Instagram server to validate password reset codes - can be used to request multiple pass codes of different users. He showed that this vulnerability can be exploited to hack Instagram accounts. "You identified insufficient protections on a recovery endpoint, allowing an attacker to generate numerous valid nonces to ten attempt recovery," Facebook said in a letter to Muthiyah.
View More
Advertisement
Advertisement
25°C
New Delhi
Rain: 100mm
Humidity: 97%
Wind: WNW 47km/h
See Today's Weather
powered by
Accu Weather
Advertisement

Top Headlines

Delhi AQI In 'Severe' Category First Time This Winter Rings Alarm Bells In National Capital
Delhi AQI In 'Severe' Category First Time This Winter Rings Alarm Bells In National Capital
Moment When Chennai Man Was Caught Walking Out Of Hospital After Stabbing Doctor: VIDEO
Moment When Chennai Man Was Caught Walking Out Of Hospital After Stabbing Doctor: VIDEO
Maharashtra Polls: After Uddhav Thackeray, Now Eknath Shinde's Bags Checked At Palgarh Helipad
Maharashtra Polls: After Uddhav Thackeray, Now Eknath Shinde's Bags Checked At Palgarh Helipad
Nitish Kumar Bends To Touch PM Modi's Feet, Watch What Happened Next
Nitish Kumar Bends To Touch PM Modi's Feet, Watch What Happened Next
Advertisement
ABP Premium

Videos

Nirmala Sitharaman Announces Game-Changing Collateral-Free Loan Scheme for MSMEsSIP Emerges as a Safe Investment Amidst Market Fluctuations | Paisa LiveTop Banks Offering 8.75% Interest for Senior Citizens: Here’s What You Need to Know!RBI Set to Make a Big Decision on Your EMI: What You Need to Know!

Photo Gallery

Embed widget