{"id":2707,"date":"2013-06-24T13:03:14","date_gmt":"2013-06-24T17:03:14","guid":{"rendered":"http:\/\/blog.nccomputertech.com\/?p=2707"},"modified":"2013-06-24T13:03:14","modified_gmt":"2013-06-24T17:03:14","slug":"facebook-exploit-reveals-six-million-identities","status":"publish","type":"post","link":"https:\/\/nccomputertech.com\/techtalk\/2013\/06\/24\/facebook-exploit-reveals-six-million-identities\/","title":{"rendered":"Facebook exploit reveals six million identities"},"content":{"rendered":"

\"\"<\/a><\/p>\n

Facebook security has always been a concern. A few years ago, a flaw allowed you to see your friends’ private chat messages, and last month there was a report of malware that attacks an individual’s machine with the intent of accessing their Facebook page. With over a billion users sharing private data, the platform is a prime target for attacks, and the company must constantly be on the lookout for security flaws in their platform.
\nNow a new bug has been reported. Although already fixed, the company reports that the bug exposed the email addresses and phone numbers of six million Facebook users. The company ignores the technical description, stating that it “can get pretty technical,” but does explain how the bug was exploited. In essence, Facebook has code that adds intelligence when users upload their contact information to find more Facebook friends. If a user’s email address is already a member of Facebook, for example, they should be asked to be your friend instead of asking them to join Facebook. Unfortunately, this information was accidentally being stored in an area that was accessible via the “Download Your Information” (DYI) tool when it wasn’t supposed to be.
\nFacebook is downplaying the severity of the bug, saying that while there were six million leaks, most of the data was only downloaded once or twice and that there doesn’t appear to be any malicious intent. In addition, the data wasn’t accessible to corporations and advertisers, although we can’t be sure that an advertiser wasn’t one of the people who downloaded the data.
\nThe company has paid a “bug bounty” to the person who revealed this flaw.
\nvia Facebook exploit reveals six million identities – Neowin<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Facebook security has always been a concern. A few years ago, a flaw allowed you to see your friends’ private […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[7,8],"tags":[156,347,849,1203],"class_list":["post-2707","post","type-post","status-publish","format-standard","hentry","category-security","category-social-media","tag-bug","tag-facebook","tag-privacy","tag-white-hat"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/papNkV-HF","jetpack-related-posts":[{"id":8910,"url":"https:\/\/nccomputertech.com\/techtalk\/2016\/05\/04\/facebook-pays-10000-to-10-year-old-for-finding-instagram-flaw-that-allowed-comments-to-be-deleted\/","url_meta":{"origin":2707,"position":0},"title":"Facebook pays $10,000 to 10-year-old for finding Instagram flaw that allowed comments to be deleted","author":"NCCT","date":"May 4, 2016","format":false,"excerpt":"By Rob Thubron | TechSpot You have to be at least 13 years old to have an account on Instagram, but this didn\u2019t stop one 10-year-old Finnish boy from exposing a vulnerability in the Facebook-owned photo-sharing application and winning $10,000 for his work. Helsinki-based Jani (his parents didn\u2019t reveal his\u2026","rel":"","context":"In "Security"","block_context":{"text":"Security","link":"https:\/\/nccomputertech.com\/techtalk\/category\/security\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":6486,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/09\/30\/this-week-in-tech-477-ello-moto\/","url_meta":{"origin":2707,"position":1},"title":"This Week in Tech 477: Ello Moto","author":"NCCT","date":"September 30, 2014","format":false,"excerpt":"Hosts: Leo Laporte, Nick Bilton, Steve Gibson, and Baratunde Thurston Shellshock bug exploited in web attacks, the 'anti-Facebook' network Ello, iPhone 6 and 6 Plus 'BendGate,' the Moto X, Blackberry Passport, and more.","rel":"","context":"In "Technology"","block_context":{"text":"Technology","link":"https:\/\/nccomputertech.com\/techtalk\/category\/technology\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":8004,"url":"https:\/\/nccomputertech.com\/techtalk\/2015\/04\/10\/latest-version-of-os-x-closes-backdoor-like-bug-that-gives-attackers-root\/","url_meta":{"origin":2707,"position":2},"title":"Latest version of OS X closes Backdoor-like bug that gives attackers root","author":"NCCT","date":"April 10, 2015","format":false,"excerpt":"For at least four years, a bug in Apple's OS X gave untrusted users\u2014and possibly remote hackers with only limited control of their target\u2014unfettered \"root\" privileges over Macs. The vulnerability is being called a \"hidden backdoor\" by Emil Kvarnhammar, the security researcher who discovered the bug and privately reported it\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2015\/04\/backdoor-640x425.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2015\/04\/backdoor-640x425.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2015\/04\/backdoor-640x425.png?resize=525%2C300 1.5x"},"classes":[]},{"id":6619,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/10\/14\/dropbox-bug-deletes-some-users-files-permanently\/","url_meta":{"origin":2707,"position":3},"title":"Dropbox bug deletes some users’ files permanently","author":"NCCT","date":"October 14, 2014","format":false,"excerpt":"Cloud services, especially cloud storage is a common thing these days but some people are still weary of storing their sensitive files in the netherworld. And whenever they argue against cloud storage solutions they point to events like the one Dropbox just went through, where some users\u2019 data was permanently\u2026","rel":"","context":"In "Networking"","block_context":{"text":"Networking","link":"https:\/\/nccomputertech.com\/techtalk\/category\/networking\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":9372,"url":"https:\/\/nccomputertech.com\/techtalk\/2018\/07\/05\/this-week-in-tech-673-the-prozac-dash-button\/","url_meta":{"origin":2707,"position":4},"title":"This Week in Tech 673: The Prozac Dash Button","author":"NCCT","date":"July 5, 2018","format":false,"excerpt":"https:\/\/youtu.be\/Wp3QiDVJwdA Reinventing Microsoft, Amazon\u2019s push into healthcare, new Apple Maps, and more. --Apple vs Samsung settled: our long international nightmare is over. --A proposed US law has patent trolls jumping for joy. --Amazon jumps into the healthcare business by buying online pharmacy PillPack. --Foxcon's new Wisconsin plant breaks ground. --Yet\u2026","rel":"","context":"In "Apple"","block_context":{"text":"Apple","link":"https:\/\/nccomputertech.com\/techtalk\/category\/apple\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/img.youtube.com\/vi\/Wp3QiDVJwdA\/0.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":8291,"url":"https:\/\/nccomputertech.com\/techtalk\/2015\/05\/13\/tech-news-today-1258-facebook-instant-articles\/","url_meta":{"origin":2707,"position":5},"title":"Tech News Today 1258: Facebook Instant Articles","author":"NCCT","date":"May 13, 2015","format":false,"excerpt":"Lead Anchor: Mike Elgan and Co-Anchor: Kevin Tofel 05-13-2015: Facebook makes loading articles ten times faster, a new bug makes data centers ten times more vulnerable, Samsung makes a big play for the Internet of Things, and more... Guests: Joseph Steinberg, Shara Tibken,and Alina Selyukh","rel":"","context":"In "Technology"","block_context":{"text":"Technology","link":"https:\/\/nccomputertech.com\/techtalk\/category\/technology\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/2707","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/comments?post=2707"}],"version-history":[{"count":0,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/2707\/revisions"}],"wp:attachment":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/media?parent=2707"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/categories?post=2707"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/tags?post=2707"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}