Live data from Hacker News

Major Facebook security hole lets you view your friends’ live chats

eu.techcrunch.com

31–40 of 67 posts

Re: Major Facebook security hole lets you view your friends’ live chats

#31
post #15

Earlier quoted context omitted.

I shared the YT link directly, and it went to the wall.

Well, at least this confirms that facebook does have the ability to filter out blacklisted URLS to the public friend feed.

Some time ago I was unable to send a link via private messages to a friend, because the link was flagged as abusive/offensive. I didn't see anything wrong with the link, neither did my friend (once I got the link to him via email).

Re: Major Facebook security hole lets you view your friends’ live chats

#32
post #15

Earlier quoted context omitted.

I shared the YT link directly, and it went to the wall.

Well, at least this confirms that facebook does have the ability to filter out blacklisted URLS to the public friend feed.

It could just be that the public friend feed only shows a small subset of all of your updates. Might have nothing to do with a blacklist.

Re: Major Facebook security hole lets you view your friends’ live chats

#34
post #3

Earlier quoted context omitted.

Can we still be angry at incompetence?

Not really. Everyone on this site has worked in software development at one point, right? So everyone here has written a bug before. Its reasonable to expect every piece of software (short of the stuff on the space shuttle) to have bugs. It simply isn't feasible for most software companies to find and fix all of the problems with their products. Facebook, like all other software, is bound to have bugs. If you don't w…

Well, a lot of this is the flip side of FaceBook's "changes are pushed to the live site as soon as they're checked in" policy. That lets them innovate quickly, but also means that whenever anyone screws up, it's immediately visible in a very public way. Other companies have release processes and QA procedures to stop this.

Re: Major Facebook security hole lets you view your friends’ live chats

#36
post #9

Are we sure the security hole was limited to merely viewing your friends' live chats? Sure, the "review how your profile appears to another person" search box will only give you your friends --- but you can change the "viewas" id manually. Edit: I see someone in the Techcrunch comments section posted what he claims to be Mark Zuckerberg's pending friends requests - Ctrl+F for "Random Jo - May 5th, 2010 at 3:04 pm UTC…

I can confirm that the security hole was not limited to only friends. I was able to insert non-friend's IDs for the "viewas" parameter.

Re: Major Facebook security hole lets you view your friends’ live chats

#37
post #3

Earlier quoted context omitted.

Can we still be angry at incompetence?

Possibly even more so than at malice. If an organization acts out of malice, you can change its behaviour by educating it about its best interests or moving to disincent its malicious behaviour. But incompetence, especially systemic incompetence, is extraordinarily difficult to change. Facebook appears to have ADD around user privacy and its interface. Designs come and go, defaults change capriciously, and security s…

Insightful,thanks. Helps me understand some situations I have been in.

Re: Major Facebook security hole lets you view your friends’ live chats

#38
Well, that's no problem! Several executives from large companies in the business of selling my private information have recently informed us all that privacy is over-rated, doesn't exist anymore and if you even want it to exist, you're wrong.

Re: Major Facebook security hole lets you view your friends’ live chats

#39
What a waste to blow this right open. Think of the fun you could have had by friending all the people that trample our privacy with both feet and to publish their stuff a year from now or so.

I'm pretty sure we'd see them wise up quickly when presented with a taste of their own dogfood.

Missed opportunity!

Post reply on HN