Facebook bug exposed contact info of 6M users

Discussion in 'other security issues & news' started by ronjor, Jun 21, 2013.

Thread Status:
Not open for further replies.
  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,115
    Location:
    Texas
    http://news.cnet.com/8301-1023_3-57590528-93/facebook-bug-exposed-contact-info-of-6m-users/
     
    ronjor, Jun 21, 2013
    #1
  2. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    4,101
    Another reason not to use facebook..:mad:
     
    The Red Moon, Jun 21, 2013
    #2
  3. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    I know dozens of lay people - occasional users that have Facebook accounts that have not reported anything. This is not saying the threat is not real.

    Like any online activity - one must be careful at all times.

     
    siljaline, Jun 21, 2013
    #3
  4. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    siljaline, Jun 21, 2013
    #4
  5. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617

    Attached Files:

    siljaline, Jun 21, 2013
    #5
  6. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,107
    Location:
    UK
    siljaline the info in your last 2 posts is contained in the link within ronjor's first post.

    The whitehat bug bounty program isn't that new really and is for input from external security researchers.
     
    stapp, Jun 22, 2013
    #6
  7. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    Perhaps and I'm not disputing that, stapp. Was just adding my own content in my own way that I like doing. The Facebook bug bounty is open to more or less anyone. Facebook is even encouraging using bogus accounts to track bugs and flaws. It's detailed in whichever links you'd prefer reading.

    Cheers !

     
    siljaline, Jun 22, 2013
    #7
  8. gerardwil

    gerardwil Registered Member

    Joined:
    Jan 17, 2004
    Posts:
    4,748
    Location:
    EU
    Thanks ronjor for keeping us informed :)
     
    gerardwil, Jun 22, 2013
    #8
  9. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,115
    Location:
    Texas
    You are most welcome Gerard. ;)
     
    ronjor, Jun 22, 2013
    #9
  10. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    They should have done this a long time ago. I was reading about Microsoft doing the same thing. Wish I was skilled enough to participate in these programs. Maybe in a few years.
     
    Cutting_Edgetech, Jun 22, 2013
    #10
  11. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    siljaline, Jun 22, 2013
    #11
  12. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    Facebook in more hot water, now over 'shadow dossiers'
    http://www.networkworld.com/news/2013/062413-facebook-in-more-hot-water-271213.html
     
    siljaline, Jun 25, 2013
    #12
  13. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    siljaline, Jun 25, 2013
    #13
  14. TheWindBringeth

    TheWindBringeth Registered Member

    Joined:
    Feb 29, 2012
    Posts:
    2,171
    Let's quote this part from the NetworkWorld article for those who don't click through (bolding is mine)...
    It won't prevent others from uploading your information or reliably remove it after it has been uploaded or manually entered, but perhaps there is something to be said for shunning those providers and individuals who you feel won't handle your information responsibly. In the case of email for example, set the server up to reject email during SMTP delivery time (prior to acceptance so your server isn't generating a bounce message to possibly innocent victims of spammer forged email addresses... just immediately return an appropriate SMTP error code and message of your choosing) based on the domain of the remote client MTA and/or the domain in the Mail From.
     
    TheWindBringeth, Jun 25, 2013
    #14
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...