Web Hack List

Other nomination

Father/Daughter Team Finds Valuable Facebook Bug

Renee Wysopal, interning at Veracode with no security background, was shown a web proxy by her father Chris and went after Facebook's privacy and permission model. She noticed a blocked user's posts still on her profile, then confirmed on a test account and a friend's account that blocking did not stop messages reaching the blocker. Facebook paid $2,500.

Record

Researcher
Dennis Fisher
Published by
Threatpost | The first stop for security news
Date

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Dennis Fisher, first published at the original source. Preserved copies are kept so the citation survives its host.