Meta develops a bug bounty program to reward those who have earned the most

Meta is developing its own bug bounty program to provide researchers who report data deletion. The amendment will allow researchers to identify both bed bug infestations, as well as previously removed ones that have already been published online.

In a blog post, Meta says it believes it is the first to launch an abusive program to achieve its goals. “We are looking to find a solution that enables the attackers to cross the border to get more than we originally intended,” Dan Gurfinkle, supervisor of Defense Technology, told reporters at a briefing.

Data encryption is different from other “malicious” scenarios that Meta uses because it uses automated tools to collect personal information from users’ profiles, such as email addresses, phone numbers, profile pictures and more. Although users often share this on their social media accounts, scrapers can display this in a wide range of ways, such as publishing content in search engines.

It can also be difficult for Meta to deal with this task. For example, in April more personal than Facebook users were posted on the platform. In that case, a real data breach occurred years ago, and the company had already fixed the error. But there was little to do when the data began to spread online. In some cases, the company people to research data.

Under the new bug bounty program, researchers will be rewarded for finding “unprotected or exposed sites with a unique Facebook profile of 100,000 with PII. [personally identifiable information] or specific information (such as email, phone number, home address, religion or politics). In lieu of his regular paycheck, Meta is said to have submitted to a charitable organization designated by the researcher not to encourage the dissemination of the deleted information.

For bug reports that may result in data loss, researchers can choose between donations or direct payments. Meta states that each defect or set is subject to a $ 500 reward.