3 ms·
After watching the video the problem seems to be that while he is absolutely a white-hat, someone that Facebook should have had no problem with and would (I ass
by citricsquid 15y ago
After watching the video the problem seems to be that while he is absolutely a white-hat, someone that Facebook should have had no problem with and would (I assume) loved to have spoken with about the vulnerability, they had absolutely no idea he was a white-hat and so they approached the situation under the assumption he was malicious in his actions, his response to being caught validated this assumption, at which point Facebook's only action was to alert authorities and then the consequent action is out of their hands. They can't turn someone over to the police and then retroactively say "it's okay nevermind", can they?
It's unfortunate but ultimately I don't see how this is anything other than an unfortunate turn of events that nobody can be held responsible for. Facebook didn't chase him because they didn't like him, it was because they believed he was a direct threat, isn't that what any business would do? When he says that he believes Facebook made the bug bounty program a higher priority after the situation with him just validates the idea that Facebook regret this but it was out of their control.
Seems the metropolitan police are at fault to his further gripes.