The blurred link provided in the report which looks similar to “https://x.facebook.com/editphoto.php?id=10100849926252771&__user=zuck” followed by few additional parameters. the link when opened provides option to remove or rotate any photo from Facebook, You just need to put the right photo id of the victim. Unfortunately when you click the delete photo button, it shows a message “The page you requested cannot be displayed right now. It may be temporarily unavailable, the link you clicked on may be broken or expired, or you may not have permission to view this page.“ We asked the hacker if he can send us the complete link which he exploited to remove Cover photo of Mark Zuckerberg, which he refused by saying that he is going to use the same bug to generate few new exploits, which he will report in Facebook bounty program for their cash rewards. He also categorically stated that he will not go public this time around as he feels he lost out on the bounty prize due to the advance publicity the Zuckerberg’s cover photo received.Ultimately, we feel that there is no solid proof for the claim that he was the one who removed the photo, or the photo was removed by Mark himself. Facebook Security Team issued a standard reply when asked to comment on the above episode “There is no merit to this claim. We have confirmed there was no suspicious activity on the account.”
