Skip to main content

Facebook pays 10-year-old $10,000 for finding Instagram security flaw

instagram live video keyboard app take pictures photos pics
Image used with permission by copyright holder
Plenty of tech companies are offering very generous rewards to those who manage to find security loopholes in their networks — just ask 10-year-old Jani, who isn’t even old enough to have an Instagram account but still managed to hack the social media network. His reward for doing so? A cool $10,000.

The Finnish boy uncovered a flaw in the network that essentially allowed him to delete any comment on Instagram. “I would have been able to eliminate anyone, even Justin Bieber,” he said in an interview with Finnish publication Iltalehti.

Recommended Videos

Once Jani discovered the flaw, he made Facebook, Instagram’s parent, aware of his findings simply by emailing the company. He even verified the findings by deleting a comment Facebook made using a test account. The security flaw was eventually resolved in February, and Facebook told Jani in March that the problem had been fixed and gave him his reward.

Jani himself hopes to one day be a security expert, but you could argue that he already is one. Until he enters the professional world, however, it looks like he has plenty of cash to burn — he plans on buying a new bike, football gear, and he’s even nice enough to buy new computers for his two brothers.

Jani isn’t the only young person to take part in Facebook’s bounty program, although he is the youngest so far. Previously, the youngest person to get money through the program was 13, according to Facebook. As of FebruaryFacebook has paid out a total of $4.3 million in rewards to more than 800 security researchers. Facebook added Instagram to the program in 2014.

Of course, Facebook isn’t the only company to offer a bounty program — Google, Microsoft, and other companies do as well. The idea is that the cost of paying security researchers is nothing compared to the cost of cleaning up a large-scale security disaster. Imagine the fallout of a hacker deleting all of Justin Bieber’s Instagram comments.

Christian de Looper
Christian de Looper is a long-time freelance writer who has covered every facet of the consumer tech and electric vehicle…
I paid Meta to ‘verify’ me — here’s what actually happened
An Instagram profile on an iPhone.

In the fall of 2023 I decided to do a little experiment in the height of the “blue check” hysteria. Twitter had shifted from verifying accounts based (more or less) on merit or importance and instead would let users pay for a blue checkmark. That obviously went (and still goes) badly. Meanwhile, Meta opened its own verification service earlier in the year, called Meta Verified.

Mostly aimed at “creators,” Meta Verified costs $15 a month and helps you “establish your account authenticity and help[s] your community know it’s the real us with a verified badge." It also gives you “proactive account protection” to help fight impersonation by (in part) requiring you to use two-factor authentication. You’ll also get direct account support “from a real person,” and exclusive features like stickers and stars.

Read more
Here’s how to delete your YouTube account on any device
How to delete your YouTube account

Wanting to get out of the YouTube business? If you want to delete your YouTube account, all you need to do is go to your YouTube Studio page, go to the Advanced Settings, and follow the section that will guide you to permanently delete your account. If you need help with these steps, or want to do so on a platform that isn't your computer, you can follow the steps below.

Note that the following steps will delete your YouTube channel, not your associated Google account.

Read more
How to download Instagram photos for free
Instagram app running on the Samsung Galaxy Z Flip 5.

Instagram is amazing, and many of us use it as a record of our lives — uploading the best bits of our trips, adventures, and notable moments. But sometimes you can lose the original files of those moments, leaving the Instagram copy as the only available one . While you may be happy to leave it up there, it's a lot more convenient to have another version of it downloaded onto your phone or computer. While downloading directly from Instagram can be tricky, there are ways around it. Here are a few easy ways to download Instagram photos.

Read more