📎 AI Summary:
The thread’s main topic is news about Facebook launching a bug bounty program, offering $500 per qualifying privacy-compromising vulnerability (with inputs like script errors/code injection, but excluding issues in third-party apps and denial-of-service). The key questions/answers focus on what kinds of bugs are eligible and what’s explicitly not covered, with discussion centered on the program’s scope and how it aligns with earlier rumors from a security conference. Overall sentiment is informational and cautiously positive, reflecting interest in the added security incentive but with attention to the program’s limitations.

JMH

Senior Member
Member details
Joined
Sep 21, 2010
Messages
361
Thread Author #1
Social networking giant Facebook has finally boarded the bug bounty bandwagon. The company announced late last week they’ll award $500 for each bug to those who share information about flaws that could compromise the site's privacy. The news confirms rumors that began to bubble at a Hack in the Box security conference back in May.

Bugs included in the bounty span the likes of script errors and code injection but exclude third-party applications like Farmville and denial-of-service (DDoS) vulnerabilities.

Facebook Launches Bug Bounty Program | threatpost