![\"\"](\"\/\/www.iser-br.com\/Themes\/Release\/images\/responsive\/ettelecom-default.jpg\")
As per Facebook, in 2018, the company awarded over $1.1 million<\/a> to security researchers from more than 100 countries, bringing the total payout till date to over $7.5 million. The payout programme, known as a bug bounty scheme, was started by Facebook in 2011. The top three countries based on the sum of payouts were India, the US and Croatia.
It was an Indian security expert who played a crucial role in the latest incident of a data breach at the social media company though he didn’t report his discovery under the bug bounty programme.
American online publisher Tech Crunch reported on Wednesday the discovery of hundreds of millions of phone numbers linked to Facebook accounts through an exposed server that contained more than 419 million records over several databases on users across markets. Tech Crunch was tipped off by Sanyam Jain, an Indian security researcher from Udaipur and a member of the Hague-based nonprofit, GDI Foundation.
\n
Dan Gurfinkel, the security engineering manager for Facebook, said since the company started its bug bounty programme — where it collaborates with security researchers from around the world — India has been among the top contributing countries based on the bounty payouts and quality of bug reports. “We greatly value our bug bounty community from India that continuously engages with us to help keep people using our platforms safe,” he added.
Gautam Kumawat, who trains state police departments on social media and cybercrime and has been an awardee in Facebook’s programme, said the bug bounty community from India has grown in keeping with the popularity of the platform here.
Vulnerable Data Set Old: Facebook<\/strong>
Last month, Indian security researcher Laxman Muthiyah from Chennai received $30,000 from Facebook for detecting a major security flaw and demonstrating how multiple Instagram<\/a> accounts could be hacked within minutes. He won $10,000 again this month for hunting a bug on the same platform. Muthiyah made his findings public on his blog The Zero Hack on July 29.
\n
Saket Modi, CEO and co-founder of Lucideus, says his firm is a top contributor to finding cyber vulnerabilities. He said Lucideus discovers many of the findings collected in the National Vulnerability Database, the world’s biggest database of cyber vulnerabilities maintained by the US government, and that the company has reported around 30 vulnerabilities to various social media firms over the past two years. In response to the latest breach discovered by Jain, Facebook said the data set is old and appeared to have information obtained before it made changes last year to remove people’s ability to find others using phone numbers. But concerns have been mounting since Jain’s discovery. In response to ET’s queries, Facebook did not specify if any Indian users had been impacted. “The dataset has been taken down and we see no evidence that Facebook accounts were compromised. The underlying issue was addressed as part of a newsroom post on April 4, 2018 by Facebook’s chief technology officer,” said a Facebook spokesperson.
<\/body>","next_sibling":[{"msid":71002663,"title":"Digital identity verification firms are seeing higher demand as businesses rule out physical interaction with users","entity_type":"ARTICLE","link":"\/news\/digital-identity-verification-firms-are-seeing-higher-demand-as-businesses-rule-out-physical-interaction-with-users\/71002663","category_name":null,"category_name_seo":"telecomnews"}],"related_content":[],"msid":71002676,"entity_type":"ARTICLE","title":"Indians lead the world as Facebook big bug hunters","synopsis":"Indian experts receive the biggest bounty in Facebook reward scheme for reporting breaches.","titleseo":"telecomnews\/indians-lead-the-world-as-facebook-big-bug-hunters","status":"ACTIVE","authors":[{"author_name":"Anumeha Chaturvedi","author_link":"\/author\/479226491\/anumeha-chaturvedi","author_image":"https:\/\/etimg.etb2bimg.com\/authorthumb\/479226491.cms?width=100&height=100","author_additional":{"thumbsize":true,"msid":479226491,"author_name":"Anumeha Chaturvedi","author_seo_name":"anumeha-chaturvedi","designation":"Assistant Editor","agency":false}}],"Alttitle":{"minfo":""},"artag":"ET Bureau","artdate":"2019-09-06 08:17:17","lastupd":"2019-09-06 08:17:17","breadcrumbTags":["million","facebook","Indians","Industry","Instagram"],"secinfo":{"seolocation":"telecomnews\/indians-lead-the-world-as-facebook-big-bug-hunters"}}" data-authors="[" anumeha chaturvedi"]" data-category-name="" data-category_id="" data-date="2019-09-06" data-index="article_1">
根据Facebook, 2018年,该公司获得了1.1美元几百万安全研究人员来自100多个国家,使总支付直到日期超过750万美元。支出项目,被称为一个bug赏金计划,是由Facebook在2011年。三大国家基于支出的总和是印度、美国和克罗地亚。
这是一个印度安全专家发挥了至关重要的作用在最新的数据泄露事件社交媒体公司虽然他没有报告他的发现bug赏金计划。
美国在线出版商Tech Crunch周三报道的发现成千上万的电话号码与Facebook账户通过暴露服务器包含超过4.19亿条记录几个数据库用户市场。Tech Crunch Sanyam告发Jain,印度安全研究员从乌特迪尔和海牙非营利组织的成员,GDI的基础。
安全工程经理Dan Gurfinkel Facebook,说自公司开始其错误赏金计划——它与安全研究人员来自世界各地,印度一直在顶部贡献国家基于赏金支出和bug报告的质量。“我们极大值错误赏金社区从印度不断与我们帮助人们使用平台安全,”他补充道。
Gautam Kumawat,火车州警察部门在社会媒体和网络犯罪一直是受奖者在Facebook的计划,表示错误赏金社会从印度已经按照平台的流行。
脆弱的旧数据集:Facebook
上个月,印度安全研究员Laxman Muthiyah从金奈从Facebook获得30000美元用于检测的主要安全缺陷和演示多个Instagram几分钟内账户可能被黑。他赢了10000美元本月再次狩猎一个缺陷在同一平台。Muthiyah在自己的博客上公开了他的发现零7月29日。
Saket莫迪,Lucideus开网的CEO和创始人之一,说他是一个顶级公司因素找到网络漏洞。他说Lucideus发现的许多发现在国家漏洞数据库,收集世界上最大的网络漏洞数据库由美国政府,维护,公司报告了约30漏洞各种社交媒体公司在过去的两年里。最新发现的违反Jain, Facebook表示数据集都是又老又似乎去年获得的信息做出改变之前删除人们使用电话号码找到其他人的能力。但耆那教徒的发现以来,已越来越多的担忧。回应等的查询,Facebook没有指定如果任何印度用户受到影响。“数据集已经拍摄下来,我们看到没有证据表明Facebook帐户被攻陷。底层问题解决作为编辑部文章的一部分,4月4日,2018年,Facebook的首席技术官,”Fac乐动扑克ebook的一位发言人说。
评论
现在评论 阅读评论(1)所有评论
找到这个评论进攻?
下面选择你的理由并单击submit按钮。这将提醒我们的版主采取行动