Another thing that's misleading, Facebook isn't the one paying out:

> Now, Marc Maiffret, chief technology officer of cybersecurity firm BeyondTrust, is trying to mobilize fellow hackers to raise a $10,000 reward for Shreateh after Facebook refused to compensate him.

That's pretty much the textbook definition of a hack.

Even worse confusion is "reward" and I almost had a stroke before I realized it's not facebook. Facebook paying the reward would have been ridiculous since then everyone would know their whitehat tos doesn't mean shit.

And here I thought they might be doing something right.