A Palestinian researcher
posted a message on Facebook CEO Mark Zuckerberg's page last week after
he says the site's security team didn't take his warnings about a
security flaw seriously. in his message, he wrote:
"First, sorry for
breaking your privacy and post(ing) to your wall," wrote Khalil
Shreateh. "I (have) no other choice to make after all the reports I sent
to (the) Facebook team."
Shreateh, who says he
has been looking for work for two years, lives in the Palestinian city
of Yatta, in a region where the unemployment rate is officially 22% and
is higher among men in their 20s, like Shreateh.
"I could sell (information about the flaw) on the black (hat) hackers' websites and I could make more money than Facebook could pay me," he said in an interview with CNN. "But for
me -- I am a good guy. I don't deal with the black (hat) stuff."
In hacker circles,
"white hat" is a term for people who report exploits they find so they
can be fixed, while "black hat" often refers to people who hack to take
advantage of those exploits.
Apparently, he had reported severally to the facebook team about its security flaws but they turned deaf ears saying "the issue he was reporting was not a bug". He went ahead to show them proof of a woman account he hacked who attended the same school with Zuckerberg. When he saw they weren't taking him seriously, knowing such an exploit would be a virtual gold mine for spammers, scam artists
and others seeking to take advantage of the site's roughly 1 billion
users worldwide, he then went ahead to hack Zuckerberg's personal account to post his complains so as to prove his point.
He said he's proud that,
as a Palestinian using a five-year-old laptop with broken keys and a
broken battery, he had the skills to find a problem with one of the
world's biggest websites. But he acknowledged hoping his tip would lead
to a reward from Facebook.
Now, Khalil Shreateh won't get a reward for reporting the flaw. "
He would have been
better served returning to Facebook's security team with more evidence
and further explaining it or, if that didn't work, taking the
information to a technology journalist to report, Cluley said".
Although, Shreateh did the wrong thing by using the flaw to post a message on Mark Zuckerberg's wall but with holding his reward i think on the other hand is unfair
No comments:
Post a Comment