Zenu's Place: Tech News

Apple Credits Other Researchers for Exposing Security Issues

<div dir="ltr" style="text-align: left;" trbidi="on">
<br /><img alt="General Facebook image from press centre" class="aligncenter size-full wp-image-471057" src="http://images.wallstcheatsheet.com/wp-content/uploads/2013/07/dan-53-of-65-e1373986114443.jpg" /><br />
<br />Last month, a Turkish security researcher named Ibrahim Balic <a href="http://venturebeat.com/2013/07/26/apple-dev-center-hack/">claimed he infiltrated</a> Apple’s(<a href="http://images.wallstcheatsheet.com/stock-research/company/?qs=AAPL">NASDAQ:AAPL</a>) developer center in order to expose a vulnerability in the website’s security. Supposedly, Balic’s discovery was serious enough to cause Apple to take down its developer site for eight days. However, it now appears that Balic’s activities were unrelated to the security issue that prompted Apple’s weeklong developer center shutdown.<br />According to <a href="http://techcrunch.com/2013/08/20/apple-credits-security-researcher-bialic-but-not-for-vulnerability-related-to-developer-center/">sources cited</a> by Matthew Panzarino at TechCrunch, Balic’s security vulnerability discovery was completely unrelated to the developer center outage. On the Apple Web Server<a href="http://support.apple.com/kb/HT1318">notifications page</a>, Apple credits 7Dscan.com and SCANV of Knownsec.com for discovering and reporting a “remote code execution issue” on Apple’s developer site. In the posting that was <a href="http://9to5mac.com/2013/08/20/security-researcher-ibrahim-balic-credited-by-apple-for-reporting-developer-center-issue/">first reported</a> by 9to5Mac, Apple credits Balic with a different security issue related to Apple’s iAd Workbench portal address.<br /><br />Panzarino speculates that the issues reported by 7Dscan.com and SCANV of Knownsec.com were the likely cause of Apple’s developer center shutdown. However, he also notes that Apple still refuses to comment on the outage.<br />
<br />
Read Full Post: <a href="http://wallstcheatsheet.com/stocks/apple-credits-other-researchers-for-exposing-security-issues.html/?ref=YF" target="_blank">Apple Credits Other Researchers for Exposing Security Issues</a></div>

Apple Credits Other Researchers for Exposing Security Issues

Last month, a Turkish security researcher named Ibrahim Balic claimed he infiltrated Apple’s( NASDAQ:AAPL ) developer center in order to ...

Hacker who exposed Facebook bug to get reward from unexpected source

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="margin-top: 11px; padding: 0px;">
<a href="http://l1.yimg.com/bt/api/res/1.2/Jk5H1YS_NVBLuSmLQX2LnQ--/YXBwaWQ9eW5ld3M7Y2g9NTQ3O2NyPTE7Y3c9ODAwO2R4PTA7ZHk9MDtmaT11bGNyb3A7aD00MzE7cT04NTt3PTYzMA--/http://globalfinance.zenfs.com/images/SG_AHTTP_OLINTECH_Wrapper_NewFeed_1/2013-08-20T210333Z_1_CDEE97J1MI100_RTROPTP_3_FACEBOOK-HACKER_original.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="A man is silhouetted against a video screen with an Facebook logo as he poses with an Dell laptop in this photo illustration taken in the central Bosnian town of Zenica, August 14, 2013. REUTERS/Dado Ruvic" border="0" height="431" src="http://l1.yimg.com/bt/api/res/1.2/Jk5H1YS_NVBLuSmLQX2LnQ--/YXBwaWQ9eW5ld3M7Y2g9NTQ3O2NyPTE7Y3c9ODAwO2R4PTA7ZHk9MDtmaT11bGNyb3A7aD00MzE7cT04NTt3PTYzMA--/http://globalfinance.zenfs.com/images/SG_AHTTP_OLINTECH_Wrapper_NewFeed_1/2013-08-20T210333Z_1_CDEE97J1MI100_RTROPTP_3_FACEBOOK-HACKER_original.jpg" style="background-color: transparent;" title="A man is silhouetted against a video screen with an Facebook logo as he poses with an Dell laptop in this photo illustration taken in the central Bosnian town of Zenica, August 14, 2013. REUTERS/Dado Ruvic" width="630" /></a><br />
<br />
A man who hacked into Mark Zuckerberg's Facebook page to expose a software bug is getting donations from hackers around the world after the company declined to pay him under a program that normally rewards people who report flaws.<br />
<br />
Khalil Shreateh discovered and reported the flaw but was initially dismissed by the company's security team. He then posted a message on the billionaire's wall to prove the bug's existence.<br />
<br />
Now, Marc Maiffret, chief technology officer of cybersecurity firm BeyondTrust, is trying to mobilize fellow hackers to raise a $10,000 reward for Shreateh after Facebook (FB.O) refused to compensate him.<br />
<br />
Maiffret, a high school dropout and self-taught hacker, said on Tuesday he has raised about $9,000 so far, including the $2,000 he initially contributed.<br />
<br />
He and other hackers say Facebook unfairly denied Shreateh, a Palestinian, a payment under its "Bug Bounty" program. It doles out at least $500 to individuals who bring software bugs to the company's attention.<br />
<br />
"He is sitting there in Palestine doing this research on a five-year-old laptop that looks like it is half broken," Maiffret said. "It's something that might help him out in a big way."<br />
<br />
Shreateh uncovered the flaw on the company's website that allows members to post messages on the wall of any other user, including Zuckerberg's. He tried to submit the bug for review but the website's security team did not accept his report.<br />
<br />
He then posted a message to Zuckerberg himself on the chief executive officer's private account, saying he was having trouble getting his team's attention.<br />
<br />
"Sorry for breaking your privacy," Shreateh said in the post.<br />
<br />
The bug was quickly fixed and Facebook issued an apology on Monday for having been "too hasty and dismissive" with Shreateh's report. But it has not paid him a bounty.<br />
<br />
"We will not change our practice of refusing to pay rewards to researchers who have tested vulnerabilities against real users," Chief Security Officer Joe Sullivan said in a blogpost.<br />
<br />
He said Facebook has paid out more than $1 million under that program to researchers who followed its rules. (Reporting by Jim Finkle; Editing by Xavier Briand)</div>
<div style="margin-top: 11px; padding: 0px;">
<br /></div>
<div style="margin-top: 11px; padding: 0px;">
Original post found here: <a href="http://finance.yahoo.com/news/hacker-exposed-facebook-bug-reward-210333258.html" target="_blank">http://finance.yahoo.com/news/hacker-exposed-facebook-bug-reward-210333258.html</a> By <b>By Jim Finkle</b><br />
<br />
<b>Also read: </b><a href="http://zenkhas.blogspot.com/2013/08/how-to-view-private-profile-pictures-in.html" target="_blank">How To View Private Profile Pictures In Full Size On Facebook</a></div>
</div>

Hacker who exposed Facebook bug to get reward from unexpected source

A man who hacked into Mark Zuckerberg's Facebook page to expose a software bug is getting donations from hackers around the world af...