Uploading a video to an event page and swapping out the ID code could have allowed computer savvy hackers to overwrite any Facebook video, no matter who uploaded it. Dan Melamed, a security researcher, uncovered the vulnerability — and earned a cool $10,000 for showing Facebook the error.
Melamed found the vulnerability last June, but only shared the glitch Monday after a Facebook update had already corrected the issue. By attaching any Facebook video to an event post by grabbing some of the code and pasting it in while uploading another video, that stolen video pops up on the event page.
But what’s even more unnerving is that when that stolen video post is deleted, the original is also deleted from the owner’s page. Disabling the comments on that post through the event page could also disable comments on the original video.
Melamed reported the vulnerability to Facebook at the end of June — a day later, the social media platform asked him to delete one of Facebook’s own videos to prove the glitch, and the next day, that’s what he did. Two weeks later, Facebook awarded him $10,000 for responsibly reporting the error.
Melamed is a self-described security researcher and web programmer — he hacks into programs to find weaknesses, then reports them to the company to fix before a hacker exploits the glitch. While the security issue was uncovered months ago, Melamed only shared how he was able to delete any Facebook video after Facebook removed the vulnerability — so hackers couldn’t use his findings as a how-to guide. He did not say when Facebook corrected the issue.
The video fix comes after a different security researcher discovered how to delete any Facebook album using only four lines of code — Facebook fixed that glitch within two hours. Facebook uses a Bug Bounty program to encourage hackers to report rather than exploit any uncovered weaknesses. Now five years old, Facebook has paid over five million dollars in “bounties” through the program.
Instagram is testing a new format for long-form videos called Features. It allows select creators to upload horizontal videos running up to 90 minutes long. Instagram has already tested the new format with creators in Brazil, and now, it's expanding to tens of thousands of creators across the US.
How will Instagram's new Features format work?
Instagram is making its way to yet another screen, and this time, Apple TV is getting a taste of the Reels rabbit hole. The company has launched a dedicated Instagram app for Apple TV, bringing Reels, longer videos, and live shows to the big screen. So, if watching one quick clip on a phone somehow turns into an hour of scrolling, there's now a much larger screen for that.
Instagram brings Reels and more to Apple TV
I have lost count of how many times I have gone to bed thinking I will finally sleep on time, only to somehow end up scrolling Instagram or X again. A few minutes turn into an hour, then another, and before I notice, it is 2 or 3 a.m. The next morning, I am usually annoyed with myself because I could have just slept and felt considerably better for the day ahead.
It is also a surprisingly hard habit to beat. Knowing you should put the phone down does not always help once it is already in your hand. Brick Night is a new gadget built around that exact problem. Instead of relying on you to remember to turn on an app blocker, it automatically restricts selected apps and websites when your phone enters your chosen sleep space during the hours you set.