My Unforgettable Experience At The Meta Bug Bounty Researchers Conference

I had the privilege of attending the Meta Bug Bounty Researchers Conference 2023, held in Seoul, South Korea, on June 29 and 30, 2023. The conference was an invite only event that brought together famous security researchers and professionals. Being a passionate security researcher myself, it felt great to be a part of such a prestigious security conference, and I am thrilled to share my experiences and insights from the event in this blog post.

The invitation: An absolute honor
Receiving the invitation to attend the Meta Bug Bounty Researchers Conference was an absolute honor, and I was more than happy to accept it. It would be the first time that I would attend a Meta event. Meta paid for my entire trip and handled all of the planning, including the travel, lodging, and meals.
I started my journey from Indore in the afternoon of June 27 and boarded a flight to Delhi. In the evening, I took a flight to Seoul and reached there in the early morning of June 28. The representatives from the Meta team received the attendees to the conference at the airport. Over 60 security researchers had arrived for the event, and we all stayed at the Andaz Seoul Gangnam hotel, which was also the venue of the Meta conference. The diverse set of people included many Indian and Chinese researchers and even PhD scholars.

After settling down, I took a stroll in the nearby areas and was delighted to spot an Indian restaurant named “New Delhi Indian Restaurant”. You know that happy feeling of finding Indian food in a foreign country, right, I felt the same. I had food at that restaurant and was happy to meet fellow Indians there. At the end of the day, I was supercharged for the next two days of the conference.

Tech Talks and much more
The conference featured captivating tech talks focused on popular Meta platforms such as WhatsApp (Web, Mobile App & Desktop) and Messenger. Meta employees, along with esteemed security researchers, took the stage to discuss the internal workings of these products and share insights into potential vulnerabilities. These talks enabled us to gain a deeper understanding of where to look for security bugs and strengthen our arsenal for safeguarding billions of users.
Many security researchers held engaging sessions about the challenges in the security field and data protection. Each speaker shared their extensive knowledge, providing deep insights into cutting-edge security trends, emerging technologies, and the latest methodologies employed by hackers.

The event provided an excellent setting to meet and network with other security researchers. I had heard that people from the Google USA team had also come to the event, but I didn’t know who all had come. As I wandered around, I was surprised to meet Sarah Jacobus, Google's Technical Program Manager. We had previously interacted over calls, and this was the first time we met in person. We engaged in a profound conversation focused on improving Google's Vulnerability Reward Program (VRP). Given Sarah's awareness of Bugsmirror, I took this opportunity to introduce our company in more detail. I showcased our team size, individual team members, our beautiful office, and the wide range of services we offer. I also discussed with her how Bugsmirror is actively assisting companies in India in solving challenging security problems, showcasing our commitment to driving meaningful change in the industry.

I also interacted with others, like the esteemed Meta Security team and a Senior Security Engineer from Cred. Engaging in discussions and sharing experiences with like-minded individuals from diverse backgrounds was an invaluable opportunity. We exchanged ideas, methodologies, and best practices in the realm of bug hunting. These interactions fostered collaboration, opening doors for potential partnerships and future projects.
It was an honor to represent Bugsmirror among the exceptional gathering of security experts at the Meta conference. Witnessing the collective dedication and expertise of these individuals reaffirmed our shared mission of securing products used by billions.

Live Hacking: Unleashing our expertise on Meta Quest Device and Discovering a Critical Security Bug
The most exhilarating aspect of the conference was the live hacking competition and bug bounty. The participants were encouraged to showcase their skills by attempting to identify security vulnerabilities in various Meta products and apps. The high-pressure environment and intense competition added an extra layer of excitement, making it a true test of our abilities as security researchers.
At Bugsmirror, we pride ourselves on our extensive experience with the Android OS, and in the hacking competition, I focused on the Meta Quest VR Headset, which runs on a customized version of Android. Leveraging our expertise accumulated over five years and using various penetration testing techniques, I found a critical security bug in the Meta Quest VR Headset. I submitted a detailed bug report to the Meta employees for review. With this bug report, the Bugsmirror team has stepped into the world of Virtual Reality to find security bugs. Meta rewarded me for finding the security bug, and my contribution helped fortify the security of the Meta Quest device.
The conference ended with an inspiring keynote address by Mr. Paul, a prominent figure in the security realm. He emphasized the importance of continuous learning, ethical hacking, and the shared responsibility of security researchers in shaping a safer digital world. The powerful message resonated with all attendees, reinforcing our commitment to advancing security practices.

Goodbye Seoul!
With a heart full of gratitude, I bid farewell to the vibrant city of Seoul, leaving behind the unforgettable memories and valuable insights gained from the awesome Meta Bug Bounty Researchers Conference 2023, and returned to India.

Participating in the Meta conference was an incredible experience that surpassed all expectations. From the enlightening tech talks and thrilling live hacking session to the invaluable networking opportunities, this event left an indelible mark on my journey as a security researcher and entrepreneur. The conference provided ample opportunities to engage in detailed discussions with tech leaders, allowing me to gain valuable insights into the current security landscape. The knowledge gained and the connections made during the conference will undoubtedly contribute to Bugsmirror's growth and will help us enhance our ability to effectively tackle the evolving security concerns of organizations worldwide.
It was an honor to attend the event alongside prominent security researchers, and I thank Meta for inviting me and organizing such a wonderful conference. Conferences like these celebrate the efforts and contributions of security researchers across the globe and keep them motivated. Bugsmirror team hopes to collaborate with Meta in the future to make the digital world more secure.