A researcher has won $ 13.125 for revealing an error that made Instagram users' email addresses and birth dates visible through the Facebook Business Suite. This is Saugat Pokharel, a Nepal-based researcher who discovered the bug, which reveals the email addresses and dates of birth of Instagram users, in October during the analysis of the Facebook Business Suite interface introduced by the social media giant in September. So, he informed Facebook directly about his finding and the technology giant corrected the error within a few hours.
Pokharel linked his Instagram account to Business Suite and noticed that when he sent message to an Instagram user, he could see that user's email address, which should normally be private. The email address appeared on the right side of the chat window. Therefore, the researcher could obtain access to a user's information, without having to violate his account.
In addition, the researcher found that the email address of each Instagram user was exposed. It is worth noting that this happened even in cases where users had their own private accounts but also in cases where users did not receive instant messages from everyone.
Facebook immediately corrected the error revealed to it by the researcher. However, while verifying it correction, Pokharel notes that Instagram users' date of birth was reported in the same way by tool Facebook for Business. The social media giant has fixed the issue of reporting the birth date of its users within a week.
A few months ago, the company cyber security "Check Point" revealed details about an Instagram bug, which could be exploited hackers to breach accounts and turn a victim's phone into a tool espionage, without any interaction.