Facebook security bug bounty


Facebook is the most recent company to come to the bug-bounty party, officially announcing recently that-

“To show our appreciation for our security researchers, we offer a monetary bounty for certain qualifying security bugs.”
Here’s how it works:

Eligibility:
To qualify for a bounty, you must:
  • Adhere to our Responsible Disclosure Policy
  • Be the first person to responsibly disclose the bug
  • Report a bug that could compromise the integrity or privacy of Facebook user data, such as: Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF/XSRF), Remote Code Injection.
  • Reside in a country not under any current U.S. Sanctions (e.g., North Korea, Libya, Cuba, etc.)
Facebook security team will assess each bug to determine if qualifies.


Rewards:

  • A typical bounty is $500 USD
  • We may increase the reward for specific bugs
  • Only 1 bounty per security bug will be awarded

Exclusions:
The following bugs aren’t eligible for a bounty:
  • Security bugs in third-party applications (e.g., http://apps.facebook.com/[app_name])
  • Security bugs in third-party websites that integrate with Facebook
  • Security bugs in Facebook’s corporate infrastructure
  • Denial of Service Vulnerabilities
  • Spam or Social Engineering techniques

Comments

Post a Comment

Popular posts from this blog

HACK GMAIL ACCOUNTS : GMAIL HACKER

Image
This tutorial is for education purpose try at you own risk                  This software will hack Gmail accounts. All you need is a bit of social engineering. Just follow the steps below: 1. Extract the RAR archive in a separate folder. 2. Run Gmail Hacker Builder.exe file on your computer. 3. Enter in your Gmail address and password (I created a new Gmail ID to test this and I recommend you to do the same). Hit on Build. Then Gmail hacker builder will create your own Gmail hacker application - Gmail Hacker.exe file which you can use to hack gmail password. 4. Now, send this Gmail Hacker.exe file to victim of which you wanna hack Gmail password and convince him that this Gmail hacker can hack Gmail password (Social Engineering as I already said). 5. Ask him to run Gmail Hacker.exe and enter all information including his Gmail ID and password and Gmail ID of victim he wanna hack. As he enters this information and hits "Hack Them", he wil...
Read more

How To Make IDM Full Version Using IDM Cracker Tool By Dailyhackingtips - Download Full Version IDM Software

Image
Hello To All friend today i am give you an amazing IDM Cracker tools which tool help you make your idm full version easily . it's 100% working . Follow Some Steps For Make IDM Full Version Using IDM Cracker Tool 1. First You Download  IDM Cracker Tool . 2. Now Run IDM Cracker Tool 3. Now if you want to install the latest version of idm then first you need to hit on the update button and your idm will be automatically updates in to the latest version . 4. After Your IDM is Updates To The Latest Version . Just You Hit on the start button and it will start cracking your idm software within few seconds . and now your idm convert in full version . That's It Now you are done. I hope you find this trick helpful for you .
Read more

How to Test Suspicious Links Before Clicking Them

Links can be compared to a mystery box: you never know what lies there until you open it. A wise person should treat links with caution. One never knows the rabbit hole a link could lead to. Caution is of utmost importance. Well, as an internet user, you can’t completely steer clear of links. You see them every day, and quite frankly, they’re enticing you to click. If you ever find a link suspicious, there are a few ways to test it: Hover over hyperlinks If you are don't know a hyperlink is secure or not, then hover the mouse cursor over the text to uncover the address. Then you can click later, if the address is legitimate. Note that phishing scams links use domain names which are similar to legitimate sites. Observance is the key to catching any frauds. For example, a phishing scam targeting this website may use something like  www.abc-hack-news.com , which appears similar to the real thing. It’s actually  www.latesthackingnews.com . Note the differences. Hovering ov...
Read more