Tamil Nadu man Laxman Muthiyah finds major bug in Instagram, gets whopping $30,000 as prize moneyAuthor : AZIndia News Desk
July 19 (AZINS) Instagram is presently one of the most used social media channels. After its launch in 2010, Instagram rapidly gained popularity, with one million registered users in two months, 10 million in a year, and 1 billion as of May 2019.
Stories feature by Instagram is being used by 500 million users daily. But do you know Facebook-owned photo-sharing app had a huge privacy bug? Laxman Muthiyah, a Chennai-based security researcher spotted this flaw while participating in Facebook's Bug Bounty programme. As per Muthiyah, he found that anyone can hack Instagram account by triggering a password reset, requesting a recovery code, or quickly trying out possible recovery codes against the account.
"I reported the vulnerability to the Facebook security team and they were unable to reproduce it initially due to lack of information in my report. After a few email and proof of concept video, I could convince them the attack is feasible," said Muthiyah as reported by IANS.
The company has awarded $30,000 to Muthiyah for his finding.
Apart from the Instagram privacy bug, Muthiyah also found a data disclosure bug on Facebook.