Live data from Hacker News

More than 1MM Facebook accounts exposed

google.com

11–20 of 181 posts

Re: More than 1MM Facebook accounts exposed

#11
post #10
post #7

Earlier quoted context omitted.

When I click on a link I see another person's email address in the login box. I assume it's a facebook user's email. See these two examples : http://www.facebook.com/login.php?next=http%3A%2F%2Fwww.face... http://www.facebook.com/login.php?next=http%3A%2F%2Fwww.face...

[deleted]

Strange it doesn't work for me. I get a "Page not found".

Re: More than 1MM Facebook accounts exposed

#12

Weird. I clicked on one of the links and it asked me if I was that user, and, if so, that I should click the login button. When I did, it logged me in as that user. Edit: This happens for multiple users. Edit2: It looks like if you click on the link, it automatically expires. bCODE is "an identifier that can be sent to a mobile phone/device and used as a ticket/voucher/identification or other type of token." I'm gues…

It's really weird.

Re: More than 1MM Facebook accounts exposed

#14
post #10
post #7

Earlier quoted context omitted.

When I click on a link I see another person's email address in the login box. I assume it's a facebook user's email. See these two examples : http://www.facebook.com/login.php?next=http%3A%2F%2Fwww.face... http://www.facebook.com/login.php?next=http%3A%2F%2Fwww.face...

[deleted]

"The page you requested was not found"

Re: More than 1MM Facebook accounts exposed

#16
Facebook's privacy settings have a ton of bugs. Here's another one: 1. Make a stupid status update post. 2. It appears in all your friends newsfeed. 3. You realize you said something stupid and private. 4. Panic. Delete post 5. Breathe sigh of relief that it is no longer showing up in your profile. 6. But wait a minute! It still keeps showing up in all your friends newsfeed. 7. Now that you deleted the post, you can't even modify it's visibility settings. Heck you can't even get to the url. But all your friends continue to see the post in their newsfeeds

So the way facebook implements a delete of any activity(status post/like/comment) is that the owner stops seeing it but everyone else keeps seeing it. That is simply the most retarded delete implementation ever!

Re: More than 1MM Facebook accounts exposed

#20

Weird. I clicked on one of the links and it asked me if I was that user, and, if so, that I should click the login button. When I did, it logged me in as that user. Edit: This happens for multiple users. Edit2: It looks like if you click on the link, it automatically expires. bCODE is "an identifier that can be sent to a mobile phone/device and used as a ticket/voucher/identification or other type of token." I'm gues…

It's really weird.

how? I am unable to replicate this bug
Post reply on HN