Live data from Hacker News

Facebook Network Breach Impacts Up to 50M Users

nytimes.com

411–420 of 635 posts

Re: Facebook Network Breach Impacts Up to 50M Users

#411
It sounds like users might be more susceptible if they recently had a birthday or know someone that did. Of course, birthdays aren't the only reason the uploader is active.

"But for certain types of posts on users' timelines, such as prompts to post happy birthday greetings, the video uploader function was shown as active."

Re: Facebook Network Breach Impacts Up to 50M Users

#412

Said this yesterday in the other Facebook thread, and I'll say it again. Working for Facebook is a morally bankrupt position. If you are an engineer you have plenty of job opportunities available to you and there is no excuse for you to continue contributing your labor and time to a wholly malignant organization. At a certain point one has to ask how we as an industry will start dealing with those who continue to tak…

> start dealing with those who continue to take a paycheck from Facebook even in the face of constant and horrific evidence of wholesale ethical violations and negligence

Do you also suggest that someone should no longer be friends with anyone who uses that Facebook platform and is 'the product'? What about that? That is support as well. Right?

Re: Facebook Network Breach Impacts Up to 50M Users

#413
post #305

Earlier quoted context omitted.

I'm sure "but it pays well" is the rationale used to self-justify many morally dubious through to outright immoral and illegal acts. Doesn't improve the validity of the position though.

Nation states (China and Russia) are backing a massive PR campaign against tools that they can't control... Hence these major attacks lately and all the hate for Facebook and Google. In reality, those tech companies are enormously more ethical than Baidu or Alibaba or almost any mainstream alternatives... And compared to companies oil, gun, drug, tobacco, alcohol and most others, Facebook and Google are saints.

Please, don't excuse their behaviors by giving examples of companies doing worse. While FB or G, or Amazon, might not be killing people directly, you could very easily compare their methods to those of big oil or tobacco, because they ignore the influence/effect they have in certain countries with questionable governments.

In my mind, FBs inaction in countries like Burma has caused more direct conflict/hate then most tobacco companies. However, if you look at the oil industry, its harder to draw a line... For example: Is the oil industry responsible for the bombing of Irak? The Government gave different reasons, but looking at current evidence for example, it just looks like pipeline protection.

So what i wanted to get at is that when a company gets to a certain size, it gets harder to separate government/ company involvement. At that point we need to look at how the company acts, and in this case, especially FBs, they are doing a horrible job (IMO) at actually standing up for their users, instead choosing to protect their business interests.

(While this is their supposed purpose as a company, there exists people like myself, who believe the current model of stock sponsored companies are the wrong way to do business).

Just a FYI: This is more a rant then anything, Im tired of the BS that these huge companies are producing and selling as the solution to humanities issues. Personally i hope that this current system fails for something better, however, personally i have not thought up anything much better atm.

Re: Facebook Network Breach Impacts Up to 50M Users

#414

Said this yesterday in the other Facebook thread, and I'll say it again. Working for Facebook is a morally bankrupt position. If you are an engineer you have plenty of job opportunities available to you and there is no excuse for you to continue contributing your labor and time to a wholly malignant organization. At a certain point one has to ask how we as an industry will start dealing with those who continue to tak…

So is working at Google, Amazon and probably 90% of the big corps of the world in many sectors - from oil to finance to pharmaceutical to telecommunications and so on. And we can include the government. If you're a subcontrator or sold in body rental (modern IT slavery) you're also in the same position as an employee, so you're enabling their evils. Also, if one of those companies is a client of your company you're a…

Society post Industrial Revolution was a mistake.

Re: Facebook Network Breach Impacts Up to 50M Users

#415
Excerpts from the press call transcript [1] by Guy Rosen explaining what lead to this breach being possible:

> The first bug was that, when using the View As function to look at your profile as another person would, the video uploader shouldn’t have actually shown up at all. But in a very specific case, on certain types of posts that are encouraging people to post happy birthday greetings, it did show up.

> The second bug was that this video uploader incorrectly used the single signon functionally, and it generated an access token that had the permissions of the Facebook mobile app. And that’s not the way the single sign-on functionality is intended to be used.

> The third bug was that, when the video uploader showed up as part of View As -- which it wouldn’t do were it not for that first bug -- and it generated an access token which is -- again, wouldn’t do, except for that second bug -- it generated the access token, not for you as the viewer, but for the user that you are looking up.

> It’s the combination of those three bugs that became a vulnerability. Now, this was discovered by attackers. Those attackers then, in order to run this attack, needed not just to find this vulnerability, but they needed to get an access token and then to pivot on that access token to other accounts and then look up other users in order to get further access tokens. This is the vulnerability that, yesterday, on Thursday, we fixed that, and we’re resetting all of those access tokens to protect security of people’s accounts so that those access tokens that may have been taken are not usable anymore. This is what is also causing people to be logged out of Facebook to protect their accounts.

[1] https://fbnewsroomus.files.wordpress.com/2018/09/9-28-press-...

Re: Facebook Network Breach Impacts Up to 50M Users

#416

Earlier quoted context omitted.

It's not impossible to do good, that's not what I'm claiming at all, and that's why the last line is there. I'm pretty sure you can do good even within facebook, doing your utmost to keep the company accountable (from my experience in another big corp, we don't see 1% of what's happening inside it, and how many people are facepalming - and we'll never know if many things were just humans being stupid or actual calcul…

Why are you so invested in the continuity of facebook? Its like, "Doctor, why dont we just apply pressure on the tumor until it starts to grow at more reasonable rates!". No. When you find cancer, you try to eliminate it. Facebook is exactly this -- cancer. They have been aggressively monopolizing software for socializing so that they can arrive to the dominant position they are in now. Until Facebook becomes more tr…

whatever happened to the saying, "if you dont like it, dont use it" ?

Re: Facebook Network Breach Impacts Up to 50M Users

#417

Earlier quoted context omitted.

> So is working at Google, Amazon and probably 90% of the big corps of the world in many sectors While Google and Amazon both have their ethical problems and serious anti-trust issues, Facebook is in a league of its own. The complete, cavalier disregard for the consequences of its own actions as long as they get theirs is utterly unconscionable. Unlike Google or Amazon, they add nothing of real value to society to ba…

While Google and Amazon both have their ethical problems and serious anti-trust issues, Facebook is in a league of its own. Maybe, but at least Facebook doesn't actively try to manipulate you into believing that they're the "good guys" and "not evil". That's why, after all, my level of respect for FB is still a lot higher than for Google.

> Facebook doesn't actively try to manipulate you into believing that they're the "good guys" and "not evil"

Hah, good one!

But just in case you're serious: Did you see Zuckerberg's Senate hearing?

Re: Facebook Network Breach Impacts Up to 50M Users

#418
Facebook is blocking users from posting stories about its security breach

    Some users are reporting that they are unable to post today’s
    big story about a security breach affecting 50 million
    Facebook users. The issue appears to only affect particular
    stories from certain outlets, at this time one story from The
    Guardian and one from the Associated Press, both reputable
    press outlets.
    ...
    The situation is another example of Facebook’s automated
    content flagging tools marking legitimate content as
    illegitimate, in this case calling it spam.

https://techcrunch.com/2018/09/28/facebook-blocks-guardian-s...

Re: Facebook Network Breach Impacts Up to 50M Users

#419

Earlier quoted context omitted.

But in today's reality, that revised number is framed as fake news. Somebody has an axe to grind, and is artificially inflating the numbers. I am totally baffled in the post-fact world.

It's only a post-fact world on a handful of media outlets.

Sadly, where I live, Texas, that handful of media outlets is what is viewed by the majority. Also, relating back to FB, it has become an echo chamber. Most people lock into one source, and once they are locked in, that information becomes gospel. They favorite/like/follow these sources, and that's all they will accept. Before I left FB, I was inundated with other people's posts from this handful of media outlets. People I know and consider friends, but this is what they are into. It was tiresome and baffling.

Re: Facebook Network Breach Impacts Up to 50M Users

#420

Said this yesterday in the other Facebook thread, and I'll say it again. Working for Facebook is a morally bankrupt position. If you are an engineer you have plenty of job opportunities available to you and there is no excuse for you to continue contributing your labor and time to a wholly malignant organization. At a certain point one has to ask how we as an industry will start dealing with those who continue to tak…

How is this not being flagged by a mod? This is just a slanderous attack on people who work at Facebook. HN is supposed to be a place for intellectual conversation and instead we have someone telling people that if they don't quit their job they are malignant scum of the earth. Of course it's at the top to. If you think Facebook is cesspool, HN is no better.
Post reply on HN