A 10-year-old boy from Helsinki received $10,000 from Instagram for finding a serious bug in the app’s comment feature.
According to Finnish media, the boy—named only as Jani—found he could delete other people’s comments by inserting malicious code into the comment field. Jani said he could even have executed the attack against the account of Justin Bieber, if he wanted to.
Facebook-owned Instagram confirmed that Jani was the youngest person to get paid through its “bug bounty” program.
Like many larger online firms, Instagram pays security researchers to inform it of the vulnerabilities they find and to encourage them to locate bugs before miscreants do.
Jani told Instagram about the flaw in February and collected his reward the following month. He said he will use the money to buy a new bike.
The company has paid out over $4.3 million since 2011 to over 800 researchers. It is not uncommon for teenagers to submit reports, but a 10-year-old is something else.
Unsurprisingly, Jani told Finnish newspaper Iltalehti that he wants to work in cybersecurity when he grows up.
More Must-Reads From TIME
- The 100 Most Influential People of 2024
- The Revolution of Yulia Navalnaya
- 6 Compliments That Land Every Time
- What's the Deal With the Bitcoin Halving?
- If You're Dating Right Now , You're Brave: Column
- The AI That Could Heal a Divided Internet
- Fallout Is a Brilliant Model for the Future of Video Game Adaptations
- Want Weekly Recs on What to Watch, Read, and More? Sign Up for Worth Your Time
Contact us at letters@time.com