Security Community Raises Money for Researcher Snubbed by Facebook Bounty Program
Now that Facebook has refused to pay a Palestinian security researcher the bug bounty he hoped to earn for reporting a problem with its service, a top security researcher has launched a campaign to pay him the money Facebook denied him.
The campaign, launched by security pro Marc Maiffret, has raised $6,030 for Khalil Shreateh thus far, more than ten times the amount that Facebook’s bug bounty program pays out for bugs of this sort.
Shreateh, a Palestinian researcher, got attention last week when he “hacked” the Facebook page of Facebook founder Mark Zuckerberg after the company’s security team gave him the brush off for a security flaw he reported. The bug would have allowed anyone, including spammers and scammers, to post messages to another user’s account, even if the person is not on the user’s Friends list.
