This 10-year-old got $10K from Instagram for one bug


The latest bug bounty hunter who pinpointed a major security flaw in Instagram, netting himself a big reward, is only 10-years-old.

The youngster called Jani, who is from Finland, isn't even supposed to be on the social media site given his age (the minimum age limit is 13), but nonetheless he found the bug which let him delete comments left by other Instagram users.

He emailed the social network with his discovery in March, and Facebook, which owns Instagram, set up a test account for the boy, allowing him to prove he could leverage malicious code to delete comments – which he successfully did.

Facebook fixed the issue quickly, and as a successful bug hunter – with this being a major vulnerability – Jani was awarded a payment of $10,000 (around £6,900, or AU$13,300).

Bug for a bike

According to Iltalehti, the Finnish newspaper which reported the story, Jani is going to spend the money on a new bike, football paraphernalia and new computers for his brothers.

At first, his teachers and classmates didn't believe Jani's tale of bug discovery, but he ended up giving a presentation on his Instagram exploits and data security in school. The boy has been coding games for several years and has previously found minor bugs along with his brothers.

His ambition is to become a security researcher – a goal he is likely to achieve given that he's managed to find a 10 grand bug at the age of 10.

Facebook said it was swift to fix this flaw, but not as swift as Microsoft recently proved to be when patching up a hole in Office 365Redmond had the vulnerability sealed inside seven hours, no less.

Via: BBC

Darren is a freelancer writing news and features for TechRadar (and occasionally T3) across a broad range of computing topics including CPUs, GPUs, various other hardware, VPNs, antivirus and more. He has written about tech for the best part of three decades, and writes books in his spare time (his debut novel - 'I Know What You Did Last Supper' - was published by Hachette UK in 2013).