We had reported on Khalil Shreateh, the man who gained international fame a few days ago when he managed to post on Mark Zuckerberg to prove that there was a security gap in the service, wanting to get one of the financial rewards that Facebook usually offers to those who discover bugs. In our publication, we mentioned that Facebook, in a message to him, refused to offer him any financial reward, stating that he violated the website's terms of use.
So the news is that the hacker in question will receive his cash prize, but not from Facebook itself.
His reward will be paid out through a Gofundme campaign . exploitThe page was created by Marc Maiffret, CEO of BeyondTrust, a security services company. Maiffret believes Facebook's decision not to offer a reward to Shreateh for finding the was a mistake, saying: "Let's all send a message to security researchers around the world and tell them that we appreciate the efforts they are making for the good of all of us."
The campaign's goal was to raise $10,000, and so far, more than $11,000 has been raised in one day. Maiffret says he's already in contact with Shreateh to transfer the money.
Meanwhile, Facebook has now admitted that “conversations failed” with Shreateh when he tried to report the bug through normal channels before deciding to write on Zuckerberg’s wall. In a post, the company’s chief security officer, Joe Sullivan, said:
We receive hundreds of requests every day, and only a small percentage of them turn out to be legitimate bugs. As a result, we were very hasty and dismissive in this case. We should explain to this researcher that his initial messages to us did not give us enough detail to “see” the problem.
