Live data from Hacker News

Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

washingtonpost.com

121–130 of 172 posts

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#121

Earlier quoted context omitted.

There’s no excuse for not knowing at least three out of English, Spanish, French, Mandarin, Urdu, Arabic, Portuguese, Russian and German. If you’ve finished university peeking at a fourth and fifth language can’t hurt either. How many do you know? Edit: Oh, and how about a bit of Latin and Greek, maybe?

I do know English, Spanish and Italian and I'm doing my best learning Portuguese but that doesn't mean we should encourage a world divided by language barriers. I'd be happy to completely forget about every language, including my own native language, and having English as a universal language, it's called progress. There's no advantage whatsoever in having a fragmented world, and if the mess in my head is any indicat…

While it would certainly be convenient if everybody spoke the same language, I don’t think it would be better than the current state of affairs, where most people know two to three languages more-or-less well.

After all, knowing more than one language does give you some different insights, not just into the culture of the other language but also into your own culture. Furthermore, there is a whole canon of classical works in basically every language which would likely lose some of its value if it were only accessible in the translated form.

We can add to the last point by taking note that English is a particularly bad example of a ‘world-wide native language’. While its simplicity – both with regards to its vocabulary and its grammar – certainly helps when it is the second language of someone, such concerns are of smaller importance when you want it to be everyone’s first language: Such a language can come with a much stronger set of grammatical rules and nicer ways to build composite words and still be (roughly) equally accessible to its native speakers.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#122
post #120

Earlier quoted context omitted.

Your previous comment is right there for anyone to read.

Added to that comment for clarity ... In this conversation, you appear to be defending the FB appsec team for the work they do other than _this particular incident_ and I have no contention with that. When it comes to _this particular incident_, a lot of things went awry. (a) FB did not appear to have a process in place for handling bug reports from non-native english speakers (or non-speakers for that matter). (b) A…

The English thing is a total red herring. Language barriers prevented them for acknowledging and correcting the bug as quickly as they might have, but couldn't change the fact that the bugfinder compromised a non-consenting account to demonstrate it.

What you call a "technicality" I continue to call probably the most important term in the whole bug bounty.

Moreover, you ignored half my comment. The point isn't that they had the ability not to pay; it's that they probably have a legal requirement not to pay.

Meanwhile: could you please acknowledge that when I pointed out that the Facebook security team does good work, your immediate response was to snark that they were pencil pushers? Your followup pretends you never said that, but you obviously did.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#123

Earlier quoted context omitted.

Ok fine, you've drawn me in. The main counter argument is that you simply have no right dictate how others communicate, despite your declarations of improved efficiency and increased idea proliferation. I think people who spend tons of money on clothes and other trappings are wasting resources and contributing to unhealthy societal development, yet I do not go around demonizing these people. I kindly share my view to…

That's not a counterargument, that's just a bunch of hypotheses. Namely: we might lose diversity of thinking, we might get translation technologies in the future, while I presented only facts : -translations cost a huge amount of money -a fragmented world slows down the spreading of information -the most influential pieces of writing are written in English In addition, if you say "let's get some translators instead o…

The adjective "lazy" only makes sense as a part of a specified context - there needs to be some agreed upon "work" or "use of energy" that the alleged lazy person is neglecting, or some shared purpose. This conversation is a non-starter because you assume these foreign-language speakers are operating under the same context as you.

It's kind of like if I called you lazy for not going to the store and buying me a case of beer every week. EDIT: OK not exactly, but you get the point... demanding large life changes from others because you claim there is a benefit. This is the epitome of egotistical exuberance.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#124
post #120

Earlier quoted context omitted.

Added to that comment for clarity ... In this conversation, you appear to be defending the FB appsec team for the work they do other than _this particular incident_ and I have no contention with that. When it comes to _this particular incident_, a lot of things went awry. (a) FB did not appear to have a process in place for handling bug reports from non-native english speakers (or non-speakers for that matter). (b) A…

The English thing is a total red herring. Language barriers prevented them for acknowledging and correcting the bug as quickly as they might have, but couldn't change the fact that the bugfinder compromised a non-consenting account to demonstrate it. What you call a "technicality" I continue to call probably the most important term in the whole bug bounty. Moreover, you ignored half my comment. The point isn't that t…

The English thing is a total red herring.

Perhaps we see things differently here, so lets just agree to disagree.

Meanwhile: could you please acknowledge that when I pointed out that the Facebook security team does good work, your immediate response was to snark that they were pencil pushers? Your followup pretends you never said that, but you obviously did.

I certainly conflated the FB appsec team with FB-as-company and whoever made the decision to not pay the bounty. Hence, I further qualified the target of my criticism in the subsequent replies.

But, boy-oh-boy, I must say, you seem to have taken my criticism of FB quite personally.

If so, I apologize for the misdirected barbs. They are not meant for you or the FB appsec team, but for whoever made the call to not pay the bounty. Like I said earlier, I look forward to learning more about the legal requirement not to pay. Hope you guys can muster that blog post.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#125

Earlier quoted context omitted.

Being real and very smart does not preclude you from being an asshole.

Whatever set of things you are obviously doesn't preclude you from calling people you don't know "assholes" either, does it? This is all you have to say?

[deleted]

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#126

I think we should crowd-source $5k to that guy and make Zuck sure we don't really need him for anything. I'm ready to toss $10.

You would prove nothing other than that crime pays.

I assume guard-of-terra intended to pay the guy who found the bug, not the company that criminally neglected the security of its users.

Hence I don’t see how you come to your conclusion…

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#127

I think we should crowd-source $5k to that guy and make Zuck sure we don't really need him for anything. I'm ready to toss $10.

You would prove nothing other than that crime pays.

Crime really pays (for such exploits) and he didn't go down that road, isn't he?

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#128

Earlier quoted context omitted.

I understand your position in this, and after reading the full story, I even agree... but I also know a few independent security researchers (i.e. people who don't do this professionally) who do not. They, rightfully or not, see an independent who was ignored and then persecuted for trying to responsibly report a bug. It's given Facebook a black eye to more than just the HN crowd, and people will probably be thinking…

I don't see how you get from the facts of what happened to "persecution". Could you go a little further into that?

Disabling his Facebook account, and deciding not to pay Khalil Shreateh (though the account was later re-enabled after further emails between himself and Facebook).

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#129
post #117
post #81

Earlier quoted context omitted.

He posted on Mark's wall, not as him. Sure this bug was like that. But what if someone discovers a bug that allows you to post as the person?

What if I was able to send a fake press release on behalf of a company?[1] What if I hacked the Twitter account of a major press organization?[2] Eventually the SEC will require traders to seek independent verification before executing based on social data, or put stops in place similar to the flash crash protections. 1. http://www.sec.gov/news/press/2009/2009-226.htm 2. http://www.forbes.com/sites/jakezamansky/2013/…

Hell -- you don't even have to "hack" in to anything to do damage with a Press Release. Just Publish it anyway - most of the press is too lazy to double-check

http://www.smh.com.au/business/mining-and-resources/hoax-pre...

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#130
post #110

Earlier quoted context omitted.

Now, in the present, we live in a world where English is the dominant language (again, having a huge number of speakers it's a whole different thing) so, as a citizen, you have to adapt. Secondly, at a no point I said anything against this guy, he at least put in the effort and is commendable. My whole point was that thinking about resorting to translators instead of thinking about how to improve the number of Englis…

Just because everyone on the web corrects everyone else, English is not the most spoken language in the world. It is the third most while Arabic is the fifth to my surprise: http://en.wikipedia.org/wiki/List_of_languages_by_number_of_...

Wrong Wiki link -- you wanted this one: http://en.wikipedia.org/wiki/List_of_languages_by_total_numb...

English is a clear 2nd. (And on at least one estimate it is first)

Post reply on HN