Chennai techie finds flaw in Instagram again, wins USD 10,000
Updated On: 26 August, 2019 03:06 PM IST | mid-day online correspondent
The new vulnerability that Muthiyah spotted was similar to the one he reported in July and allowed anyone to hack Instagram accounts without consent permission
This picture has been used for representational purpose
Chennai: Just a month after winning USD 30,000 from Facebook for spotting a flaw in Instagram, Chennai-based security researcher Laxman Muthiyah on Monday said that he has yet again discovered a new account takeover vulnerability on the photo and video-sharing app. This time he has won USD 10,000 as part of the social network's bug bounty programme.
The new vulnerability that Muthiyah spotted was similar to the one he reported in July and allowed anyone to hack Instagram accounts without consent permission. Facebook has now fixed the vulnerability that Muthiyah reported.
"Facebook and Instagram security team fixed the issue and rewarded me USD 10000 as a part of their bounty programme," Muthiyah said in a blog post.
ADVERTISEMENT
Poll
Who will win the Punjab Elections?
Muthiyah found that the same device ID which is the unique identifier used by the Instagram server to validate password reset codes can be used to request multiple passcodes of different users. He showed that this vulnerability can be exploited to hack Instagram accounts.
"You identified insufficient protections on a recovery endpoint, allowing an attacker to generate numerous valid nonces to ten attempt recovery," Facebook said in a letter to Muthiyah.
Edited by mid-day online desk with inputs from IANS
Catch up on all the latest Crime, National, International and Hatke news here. Also download the new mid-day Android and iOS apps to get latest updates
Tags
Trending Stories
Latest Web Stories
Latest Photos
17 December, 2025 11:56 AM IST | IN PHOTOS: MLAs at Vidhan Bhavan during Maharashtra Legislative Council polls
Asif Ali Sayed
09 September, 2024 09:32 PM IST | IN PHOTOS: People in Mumbai celebrate Gauri Puja during Ganeshotsav
Asif Ali Sayed
09 September, 2024 09:13 PM IST | IN PHOTOS: Mumbai witnesses sunny weather as rains take a break
Asif Ali Sayed
09 September, 2024 01:53 PM IST | In Photos: Amit Shah attends Ganeshotsav 2024 festivities in Mumbai
Divya Nair
Latest Videos
ADVERTISEMENT
Latest Headlines
08 July, 2026 01:00 PM IST | mid-day online correspondent
03 July, 2026 05:36 PM IST | Tuhina Upadhyay
03 July, 2026 04:56 PM IST | Shachi Chaturvedi
03 July, 2026 04:55 PM IST | Oshin Fernandes