Facebook Flaw Fiasco: Researcher Bags $100K for Bug Bounty Bonanza!

A researcher pocketed $100,000 from Facebook for finding a bug that let him command an internal server. The flaw, linked to an unpatched Chrome version in Facebook’s ad platform, was quickly fixed after being reported. This highlights the potential vulnerabilities in online ad systems.

3P
Published: January 12, 2025 10:56 amAdded: January 12, 2025 at 3:01 amAssembled by: The Editor
Pro Dashboard

Hot Take:

Well, folks, it seems like Facebook might want to update their Chrome browser before it turns into a bug buffet for hackers. Who knew their ad servers were taking a vacation back to 2019 with an unpatched Chrome? Maybe next time, they should try turning it off and on again!

Key Points:

  • Ben Sadeghipour, a security researcher, snagged $100,000 from Facebook by finding a server vulnerability.
  • The bug allowed him command access to an internal Facebook server due to an unpatched Chrome flaw.
  • Facebook quickly acknowledged and fixed the issue after Sadeghipour’s report.
  • The exploit was discovered on Facebook’s ad platform, highlighting potential risks in online ad systems.
  • Sadeghipour previously made headlines with massive bug bounty earnings from Apple.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
powered by the NSA, er,  GDPR Cookie Compliance
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?