3 ms·
> Shreateh reports he will not, however, receive a bounty for his work — per an e-mail from Facebook, he violated the terms of the program when he hacked Zucker
by arnarbi 13y ago
> Shreateh reports he will not, however, receive a bounty for his work — per an e-mail from Facebook, he violated the terms of the program when he hacked Zuckerberg’s account.
I think this is wrong. He posted on Sarah Godin's wall first before making any report, very clearly breaking the rules FB sets up for its whitehat program. They offer a way to create test accounts for exactly this. Posting on Mark Zuckerberg's wall has nothing to do with it.
As far as I'm concerned. FB's only mistake here was to brush him off instead of asking for further information from the initial report. Hardly newsworthy.
- bwang8 13y agoFrom my understanding, Sarah Godin is a fake FB account that he made to test his bug out.
- yuliyp 13y agoSarah Goodin is not a fake account, she is one of the first Facebook users (back when it was at Harvard only).
- jamesjguthrie 13y agoHow do you know that the post to her wall wasn't his initial discovery of the bug? Any occurrence of the bug was a breach of the ToS.
- ceol 13y agoNot between two test accounts or two accounts that belong to you (work and personal, which you are allowed to have.)