Facebook paid Indian handsomely for finding bug!

Laxman Muthiyah of India was rewarded with a huge cheque of $12,500 for reportedly discovering a bug in the Social networking site, Facebook that allowed hackers to arbitrarily delete photos from accounts. Facebook which has the system to reward those who identified the bugs in its site rewarded Laxman accordingly.

The bug allowed anyone with a bit of technical know-how to delete any photo on Facebook.Laxman posted his findings in a blog post titled, ‘How I Hacked Your Facebook Photos’. Facebook fixed the bug shortly after it was discovered.

According to Muthiyah, the bug is present in Facebook’s Graph API which do not check permissions fully. If a user sent a request to the Graph API to delete someone else’s photo album and used his/her own Facebook for Android token for approval, Facebook accepted it and deleted the album.