An Indian white hat hacker from Bengaluru was awarded Rs 1 million (approximately $15,000) after he found a bug in Facebook's login system. Anand Prakash found a security issue that enabled hackers to access a user's photos, message and debit and credit card details. 
 
 See also: Facebook bug lets you see how many people viewed your post 
 
 A security engineer with Indian e-commerce giant Flipkart, Prakash discovered that he could reset any Facebook account's password by brute on beta.facebook.com and mbasic.beta.facebook.com. He also demonstrated the flaw in a video. 
 
 He reported the issue to Facebook on Feb. 22 and got a response from the company on Mar. 2, awarding him a bounty for his work. 
 
 Prakash is a veteran participant in the bug bounty programmes run by technology giants like Facebook and Google, which encourage ethical hackers to identify vulnerabilities in their security. He has reported bugs to Twitter, Google, Blackberry, Adobe, Nokia, SoundCloud and PayPal. 
 
 His findings have helped him earn upwards of Rs 10 million (approximately $149,000) in awards. Last year, he earned the fourth position for reporting the highest number of bugs on Facebook internationally. He also holds the second global rank for discovering vulnerabilities on Twitter. 

 A computer programmer has revealed how he was able to hack into any Facebook account using relatively simple software. 
 
 Anand Prakash, a product security engineer at Indian ecommerce company Flipkart, said he was able to access accounts without a password by using a common “brute force” cyber-attack on the Facebook website. 
 
 The flaw left Facebook’s 1.6 billion users at risk, although it only existed in the wild for around two days before it was discovered, and was quickly rectified. 
 
 When a Facebook user loses their password, they are asked to enter their email address, username or phone number, and are then sent a six-digit code which they can use to log in on the Facebook website.
– He could have posted hilarious status updates for millions at the very least. Instead, after discovering a days-old flaw in Facebook's login system that allowed him to hack any account, Anand Prakash took the high road. The Indian security engineer reported the bug—which allowed hackers to test unlimited code combinations to reset a password on Facebook's beta website, per the Telegraph—and received $15,000 from Facebook, which quickly fixed the problem. "One of the most valuable benefits of bug bounty programs is the ability to find problems even before they reach production," says a Facebook rep. Prakash will be adding the sum to the $149,000 he's already earned reporting bugs to Twitter, Google, Blackberry, Adobe, Nokia, SoundCloud, and PayPal, reports Mashable.