Finnish 10-year-old Jani Jani from Helsinki reported a vulnerability to Facebook-owned Instagram. Jani inserted malicious code into the comment section allowing him to delete anything even profiles with no authorization from the targeted account. He received a $10,000 bounty from Facebook for reporting the bug. Facebook’s terms of service require that reporting security researchers be of legal age. Facebook has been able to quickly plug the vulnerability, and Jani hopes to spend it on a new bike and computer.”]