facebook bug discovered by nepali bounty feature