Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

washingtonpost.com

Post reply on HN
Print view View original

141–150 of 172 posts

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#141

Post by cdcarter »

toomuchtodo wrote: post #86
webvictim wrote: post #73

Earlier quoted context omitted.

I hope that any credible hacker would be able to realise that to get paid for a white hat vulnerability, you have to use it in a white hat way - i.e. show your working in accordance with the security team's guidelines. Deliberately posting to other people's timelines "for exposure" isn't white hat in the slightest.

Unless you're getting ignored by the security team. Yes, I get it. There was a language barrier. There are what, 7 billion people on earth? Any one of them could be reporting a security vulnerability, and chances are english isn't their first/primary language. Prepare/act accordingly.

He violated the TOS _before_ he was ignored by the security team. I agree that it was handled wrong but let's not fudge the details for our rhetoric.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#142

Post by NhanH »

cliveowen wrote: post #87
dwaltrip wrote: post #84

Earlier quoted context omitted.

The only thing these nice commentators are advocating for is not blasting the character of others not conforming to your worldview. You are allowed to have an opinion, but the way you judge the choices of other people is rather unproductive.

All I see here are people going against me without offering a real reason as to why a fragmented world, the status quo, should be promoted.

You do realize the ironic of your claim that English is currently the most prevalent language is also the status quo, right? If the Earth is to used a single language, why would that be English (besides the status quo, which you obviously dislike)?

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#143

Post by skeletonjelly »

short_circut wrote: post #7
chrisacky wrote: post #2

Although this is blogspam, it's a blogspam that I can actually support... This is being covered a lot more widely because FB didn't just pay the guy. I know it wasn't about money for FB, but this is easily done a lot more damage then they would have expected and because of their inadequate handling of a single bug report, I can only feel satisfied as I think this will go down as a good case study of how not to be so…

Dismissive and ignored? Did you read what he submitted to them? It made no sense. He vaguely stated that there was a bug and his education. His bug report was nonsensical. I am not even slightly surprised they ignored it. And he violated the TOS before he even ever tried to post to Zuckerberg's wall.

Can we not get into this again? There are plenty of threads on the validity of this as a bug report.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#144

Post by skeletonjelly »

beat wrote: post #20
jack-r-abbit wrote: post #5

I don't really understand what significance there is in stating that he is "unemployed." Does that somehow make his actions better/worse or the "hack" more/less tolerable?

You're starting to see the fnords. Stop that! Look over there, a celebrity is having marital problems! A pretty young blonde woman is missing! Journalism is always fair and balanced. They would never, ever use potentially biasing words to suggest that you favor the big corporation over the individual.

To be fair, Khalil mentioned this several times in his blog post.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#145

Post by skeletonjelly »

baby wrote: post #8

hasn't this story been posted multiple times already? Also it was made clear that he clearly violated the TOS and that his messages were unintelligible.

It most definitely has. I'm so over arguing over this.

Previous discussion

https://news.ycombinator.com/item?id=6229858 +383

and about 10 other single digit posts of various blogspam sites

https://www.hnsearch.com/search#request/submissions&q=facebo...

and reddit

http://www.reddit.com/r/sysadmin/comments/1kkvfr/user_report... +329

http://www.reddit.com/r/netsec/comments/1kkvei/user_reports_... +532

http://www.reddit.com/r/technology/comments/1ko71v/researche... +831

http://www.reddit.com/r/technology/comments/1kkoux/hacker_po... +3005

Can we wrap this one up perhaps?

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#146

Post by ceol »

anigbrowl wrote: post #138
gedrap wrote: post #136

Earlier quoted context omitted.

I am not a native English speaker. Although I study in England (University of Manchester), I believe half of my course mates are not native speakers either. At least the ones who turn up to lectures. People try to explain their algorithms, ideas in broken English with damn thick accents but they DO explain. They put effort. From what he managed to write in the blog post, he CAN write English which is not THAT bad. Bu…

You do make a good point, but at the same time I was easily able to understand his original bug report. I agree that both sides should be making a little more effort, and engaging in a bit less drama.

He didn't make a bug report. He didn't specify how he could post to other peoples' walls. All he said was that he could, and that he already broke the ToS by using it on another person's account. This was his original report:

    -----Original Message to Facebook-----
    From: kha****@hotmail.com
    To:
    Subject: post to facebook users wall .

    Name: Ḱhalil
    E-Mail: khal****@hotmail.com
    Type: privacy
    Scope: www
    Description: dear facebook team .

    my name is khalil shreateh.
    i finished school with B.A degree in Infromation Systems .

    i would like to report a bug in your main site
    (www.facebook.com) which i discovered it .

    repro:
    the bug allow facebook users to share links to other 
    facebook users , i tested it on sarah.goodin wall and i 
    got success post
    link - > https://www.facebook.com/10151857333098885
    -----End Original Message to Facebook-----
From that, you surmised that he exploited the "make a new wall post" form by replacing the user ID with another of his choosing?

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#148

Post by rjvir »

wereHamster wrote: post #53
short_circut wrote: post #7

Earlier quoted context omitted.

Dismissive and ignored? Did you read what he submitted to them? It made no sense. He vaguely stated that there was a bug and his education. His bug report was nonsensical. I am not even slightly surprised they ignored it. And he violated the TOS before he even ever tried to post to Zuckerberg's wall.

To all hackers: If you speak perfect english, please proceed to submit exploits to the FB security team and collect $5k on your way out. If not, post to blackhat forums and receive $10k. Or use the exploit to manipulate FB stock price (I'm sure posting as Mark would move the stock price significantly, if only for a few minutes. But that's enough to earn a lot more than $5k).

Only problem with using an exploit to manipulate stock price is that the SEC would be at your doorstep in no time and put you behind bars for a significant amount of time.

Re: Mark Zuckerberg’s Facebook page was hacked by an unemployed web developer

#149

Post by ck2 »

chrisacky wrote: post #2

Although this is blogspam, it's a blogspam that I can actually support... This is being covered a lot more widely because FB didn't just pay the guy. I know it wasn't about money for FB, but this is easily done a lot more damage then they would have expected and because of their inadequate handling of a single bug report, I can only feel satisfied as I think this will go down as a good case study of how not to be so…

Have you see the interview on CNN with this guy?

http://www.cnn.com/2013/08/19/tech/social-media/zuckerberg-f...

He is rather poor and had a tiny broken laptop that is missing five keys.

He could have used that money and really tried to get them to see the problem.

They should pay him just out of realizing what idiots they were.

Someone should at least send him a better laptop.

Post reply on HN