Instagram paid Mayur Fartade $ 30,000 for finding a flaw in his code that allowed him to gain access to a private account and view posts, reels, IGTV videos and stories. In addition to having access to archived photos and others.
Moved public how he found the flaw and made it known to Facebook in April this year via a Medium post. The company fixed the vulnerabilities in June. To access posts from a private account, the person had to have the media ID, which is not so easy to obtain. But Fartade proved that it was possible and, in addition, had access to the likes, comments and elements saved by the user.
The $ 30,000 that Fartade received from Facebook is part of a program of an economic incentive program for finding vulnerabilities in the company’s platforms and reporting them for their solution.
Private Instagram accounts allow only followers authorized by the account owner to view posts. This also includes the other features like Reels, IGTV content and stories. This functionality is often used by people to share personal photos or photos of their children with a closed core of people, so finding these types of vulnerabilities and fixing them before others take advantage of it is very important.
Picture: Syifa5610 and Freepik.
–
