A few days ago, researcher Laxman Muthiyah discovered a major bug in Facebook, through which he could delete any photo he wanted from the social network.
The bug concerns Facebook Graph API , through which users can delete their photo albums with a single command.
However, due to a Facebook error , through this command, the user will be able to delete any Facebook album that they have permission to see, as long as they are connected to the API from their mobile phone.
Facebook rewarded Laxman Muthiyah with $12.5 thousandfor pointing out the bug, while according to security company Sophos, the bug is not that important, as not all users have access to the mobile version of the API – a statement that is obviously intended to reassure users after the disclosure of such a serious problem.
Facebook has now fixed the bug in question.
Watch an explanatory video below from researcher Laxman Muthiyah on how he discovered the bug:
Source: gr.pcmag.com
