Facebook Helped Develop a Tails Exploit
1–10 of 116 posts
Re: Facebook Helped Develop a Tails Exploit
#2«They also paid a third party contractor "six figures" to help develop a zero-day exploit in Tails: a bug in its video player that enabled them to retrieve the real I.P. address of a person viewing a clip.»
This sounds like they describe the well-known WebRTC leak: https://restoreprivacy.com/webrtc-leaks/
Re: Facebook Helped Develop a Tails Exploit
#3So now you have the most powerful surveillance platform ever invented directly working for the state. What could possibly go wrong?!
Re: Facebook Helped Develop a Tails Exploit
#4« They also paid a third party contractor "six figures" to help develop a zero-day exploit in Tails: a bug in its video player that enabled them to retrieve the real I.P. address of a person viewing a clip. » This sounds like they describe the well-known WebRTC leak: https://restoreprivacy.com/webrtc-leaks/
Other than webRTC being related to video playing, i dont see the connection. They don't really describe the exploit, so hard to say, but the webrtc leak isn't really in the video player part, its super well known (literally a feature not a bug) so i dont think you would need to pay six figures for it, and tails uses tor browser which doesn't support webrtc.
Re: Facebook Helped Develop a Tails Exploit
#5The fact that it took thousands of dollars and an entire company to write an exploit shows how secure Tails really is.
Re: Facebook Helped Develop a Tails Exploit
#6The fact that it took thousands of dollars and an entire company to write an exploit shows how secure Tails really is.
Looks like the bug wasn't really in Talis but in other software they use, Firefox/Tor-Browser?
Re: Facebook Helped Develop a Tails Exploit
#7The fact that it took thousands of dollars and an entire company to write an exploit shows how secure Tails really is.
> entire company
> Facebook had tasked a dedicated employee to unmasking Hernandez
Re: Facebook Helped Develop a Tails Exploit
#8Facebook could at-least have had the decency to report the bug after they were done, who knows what the FBI / NSA are using it for now.
Re: Facebook Helped Develop a Tails Exploit
#9This guy deserves what was coming to him, I can understand how it would be very tiresome to deal with a pest like this who keeps coming back, but breaking norms about reporting bugs to vendors like this sets a very nasty precedent.
As does a company like Facebook spending large sums of money to narrow down on specific people, it could be someone you hate today and an activist the next.
Re: Facebook Helped Develop a Tails Exploit
#10Facebook could at-least have had the decency to report the bug after they were done, who knows what the FBI / NSA are using it for now.
According to this article [1] the code involved with this exploit should be removed at some point.
" A factor that convinced Facebook’s security team that this was appropriate, sources said, was that there was an upcoming release of Tails where the vulnerable code had been removed. Effectively, this put an expiration date on the exploit, according to two sources with knowledge of the tool.
As far as the Facebook team knew, Tails developers were not aware of the flaw, despite removing the affected code. One of the former Facebook employees who worked on this project said the plan was to eventually report the zero-day flaw to Tails, but they realized there was no need to because the code was naturally patched out. "
[1] https://www.vice.com/en_us/article/v7gd9b/facebook-helped-fb...