Live data from Hacker News

Major Facebook security hole lets you view your friends’ live chats

eu.techcrunch.com

11–20 of 67 posts

Re: Major Facebook security hole lets you view your friends’ live chats

#11
post #7
post #6

Even though chat is blocked, you can still see pending friends request on anyone's profile. In fact, one can probably use this to add anyone as a friend. Send a friend request, view your profile with their id and accept the request you just sent.

It doesn't let you accept/reject those requests - just shows them (afaik)

Looks like they are in the middle of patching that -- I see a lage number but when clicking on it I only see my own messages.

Re: Major Facebook security hole lets you view your friends’ live chats

#15
post #12

I just shared this URL on my wall and it didn't go to the feed. ha.

I shared the YT link directly, and it went to the wall.

Well, at least this confirms that facebook does have the ability to filter out blacklisted URLS to the public friend feed.

Re: Major Facebook security hole lets you view your friends’ live chats

#16
post #15

Earlier quoted context omitted.

I shared the YT link directly, and it went to the wall.

Well, at least this confirms that facebook does have the ability to filter out blacklisted URLS to the public friend feed.

...and a willingness to censor within their walled garden. Maybe they had already shown that, but now I know.

Re: Major Facebook security hole lets you view your friends’ live chats

#18
post #17

It appears he gets access to not only their chat, but friend requests, notifications, and messages too. When he switches to Sian from Hayley, notice how all the indicators light up. Spying on PMs is even worse than live chat, in my opinion.

Certainly seems to be fixed for me now though. The interesting question is how long has this "bug" been present - how long has my account been compromised for?
Post reply on HN