Skip to main content

Facebook pays 10-year-old $10,000 for finding Instagram security flaw

instagram live video keyboard app take pictures photos pics
Image used with permission by copyright holder
Plenty of tech companies are offering very generous rewards to those who manage to find security loopholes in their networks — just ask 10-year-old Jani, who isn’t even old enough to have an Instagram account but still managed to hack the social media network. His reward for doing so? A cool $10,000.

The Finnish boy uncovered a flaw in the network that essentially allowed him to delete any comment on Instagram. “I would have been able to eliminate anyone, even Justin Bieber,” he said in an interview with Finnish publication Iltalehti.

Once Jani discovered the flaw, he made Facebook, Instagram’s parent, aware of his findings simply by emailing the company. He even verified the findings by deleting a comment Facebook made using a test account. The security flaw was eventually resolved in February, and Facebook told Jani in March that the problem had been fixed and gave him his reward.

Jani himself hopes to one day be a security expert, but you could argue that he already is one. Until he enters the professional world, however, it looks like he has plenty of cash to burn — he plans on buying a new bike, football gear, and he’s even nice enough to buy new computers for his two brothers.

Jani isn’t the only young person to take part in Facebook’s bounty program, although he is the youngest so far. Previously, the youngest person to get money through the program was 13, according to Facebook. As of FebruaryFacebook has paid out a total of $4.3 million in rewards to more than 800 security researchers. Facebook added Instagram to the program in 2014.

Of course, Facebook isn’t the only company to offer a bounty program — Google, Microsoft, and other companies do as well. The idea is that the cost of paying security researchers is nothing compared to the cost of cleaning up a large-scale security disaster. Imagine the fallout of a hacker deleting all of Justin Bieber’s Instagram comments.

Editors' Recommendations

Christian de Looper
Christian’s interest in technology began as a child in Australia, when he stumbled upon a computer at a garage sale that he…
X rival Threads could be about to get millions of more users
Instagram Threads app.

Threads -- Meta’s rival to X, formerly Twitter -- has just launched in the European Union (EU), a market with nearly half a billion people.

The app launched in the U.S. to much fanfare in July, with Meta hoping to attract X users disillusioned with the turbulence on the platform since Elon Musk acquired it for $44 billion 14 months ago.

Read more
X (formerly Twitter) returns after global outage
A white X on a black background, which could be Twitter's new logo.

X, formerly known as Twitter, went down for about 90 minutes for users worldwide early on Thursday ET.

Anyone opening the social media app across all platforms was met with a blank timeline. On desktop, users saw a message that simply read, "Welcome to X," while on mobile the app showed suggestions for accounts to follow.

Read more
How to create multiple profiles on a Facebook account
A series of social media app icons on a colorful smartphone screen.

Facebook (and, by extension, Meta) are particular in the way that they allow users to create accounts and interact with their platform. Being the opposite of the typical anonymous service, Facebook sticks to the rule of one account per one person. However, Facebook allows its users to create multiple profiles that are all linked to one main Facebook account.

In much the same way as Japanese philosophy tells us we have three faces — one to show the world, one to show family, and one to show no one but ourselves — these profiles allow us to put a different 'face' out to different aspects or hobbies. One profile can keep tabs on your friends, while another goes hardcore into networking and selling tech on Facebook Marketplace.

Read more