Aug 26, 2019
Chennai: Barely a month after winning $30,000 from Facebook for spotting a flaw in Instagram, Chennai-based security researcher Laxman Muthiyah on Monday said he again discovered a new account takeover vulnerability on the photo and video-sharing app. This time he has won $10,000 as part of the social network’s bug bounty programme.
The new vulnerability that Muthiyah spotted was similar to the one he reported in July and allowed anyone to hack Instagram accounts without consent permission.
Facebook has now fixed the vulnerability that Muthiyah reported.
“Facebook and Instagram security team fixed the issue and rewarded me $10000 as a part of their bounty programme,” Muthiyah said in a blog post.
Muthiyah found that the same device ID – the unique identifier used by Instagram server to validate password reset codes – can be used to request multiple pass codes of different users.
He showed that this vulnerability can be exploited to hack Instagram accounts.
“You identified insufficient protections on a recovery endpoint, allowing an attacker to generate numerous valid nonces to ten attempt recovery,” Facebook said in a letter to Muthiyah.IANS
Cong candidate in Kerala suspects foul play as list of poll officials leaked, one suspended
Pathanamthitta (Kerala):After the Congress candidate in the Pathanamthitta Lok Sabha seat in Kerala alleged foul play in the leaking of a list of election officials, the district collector in Kerala...
US delivered new long-range missiles to Ukraine: Pentagon
Washington: The US shipped a new long-range missile system to Ukraine after the delivery received a secret sign-off, the Pentagon has said. The precision weapons were part of an emergency...
NCP(SP) Manifesto: Rs 1 lakh/year dole to poor women & jobless youth, min wage hike
Pune (Maharashtra): The Nationalist Congress Party(SP) President Sharad Pawar here on Thursday released the party’s 2024 Election Manifesto with a slew of promises to attract the poor, women, farmers, the...
Lawyers, parties in-person to receive SC case-related messages on WhatsApp, announces CJI
New Delhi: Chief Justice of India (CJI) D.Y. Chandrachud on Thursday announced the integration of WhatsApp messaging services with the ICT (Information and Communication Technology) services of the Supreme Court....
Four Telangana students celebrating exam success killed in accident
Hyderabad: Four intermediate students, returning after a party to celebrate their success in exams, died in a tragic road accident in Warangal district of Telangana, police said. The accident occurred...
US Congress approves $61 billion in aid for Ukraine
Washington: The US Congress has approved a $61-billion aid package for Ukraine after months of stalling. The US Senate on Tuesday approved the bill with 79 votes in the 100-seat...
Iran, Sri Lanka inaugurate Uma Oya multipurpose development project
Colombo: Visiting Iranian President Ebrahim Raisi and Sri Lanka President Ranil Wickremesinghe on Wednesday inaugurated the Uma Oya Multipurpose Development Project (UOMDP) with an expected annual energy production of 290...
Where are the two crore jobs that were promised, asks Congress chief Kharge as Kerala prepares to vote
Thiruvananthapuram: AICC President, Mallikarjun Kharge on Wednesday slammed the BJP and the Prime Minister during an interaction with the media at the Congress’ headquarters in Kerala. Kharge has been in...
PDP’s Waheed Parra files nomination for Srinagar LS seat
Srinagar: Peoples Democratic Party (PDP) leader Waheed ur Rehman Parra on Wednesday filed his nomination for the Srinagar Lok Sabha seat. Accompanied by hundreds of supporters Parra reached the office...
Madras HC declares 2010 amendment to law on Waqf properties by TN govt as unconstitutional
Chennai: Madras High Court has declared unconstitutional a 2010 amendment which brought Waqf properties under the ambit of the Tamil Nadu Public Premises (Eviction of Unauthorised Occupants) Act of 1976....
India calls for ‘gender-responsive arms control’ to prevent sexual violence in conflicts
United Nations: To combat sexual violence in conflict situations, India has advocated a multifaceted approach which includes “gender-responsive arms control” that prevents the proliferation of weapons. “Demilitarisation, intertwined with disarmament,...
Pentagon: All vessels for building temporary Gaza harbour are ready
Washington: The Pentagon has said that construction of a temporary harbour to deliver aid to the embattled Gaza Strip will soon begin. "All the necessary vessels are within the Mediterranean...
