A look inside Facebook's source code
sintheticlabs.com
A look inside Facebook's source code
1–10 of 53 posts
Re: A look inside Facebook's source code
#2Reminds me somewhat of this https://twitter.com/dumpmon which monitors all pastes for email and password dumps. You can use https://haveibeenpwned.com/ to search if your email has ever been leaked/dumped.
Re: A look inside Facebook's source code
#3Interesting.
It's also interesting that Facebook developers are using Pastebin for things such as this. I would assume that they'd have an internal wiki, or gist-like app.
It's also noteworthy to see how they set up their accounts: first initial, full lastname—same standard as many other companies. But seeing it laid out can help in the guessing of other names (or common name occurances, as you don't even need a full first name).
While some leaks may not even be effective outside Facebook's internal network (things such as database credentials, network shares… hopefully), having actual code that may be in production does pose a risk. The possiblity to see where, for instance, data isn't fully sanitized, or where information being fetched might not require proper authentication[1] is more worrying. Facebook is known for promoting "move fast and break things". Hopefully they have good QA and SDET teams to catch these things.
[2] One code snippet features the following: > // TODO: add privacy checks!
Re: A look inside Facebook's source code
#4Pastebin has TONS of stuff lying around, it's pretty fascinating. I've always wanted to spend some time digging around there, but haven't gotten around to it.
Re: A look inside Facebook's source code
#5fascinating stuff. I'm still amazed at how many username/passwords are freely available via github search:
https://github.com/search?p=96&q=gmail+password&ref=searchre...
even if they have 2-step auth setup, people choose "complete the email address" as a form of authentication which you can most likely get from their github profile.
the moral of the story here is - if you do not want someone to find it - do not publish it online
Re: A look inside Facebook's source code
#6Somewhat ominous for top HN users:
Re: A look inside Facebook's source code
#7Interesting. It's also interesting that Facebook developers are using Pastebin for things such as this. I would assume that they'd have an internal wiki, or gist-like app. It's also noteworthy to see how they set up their accounts: first initial, full lastname—same standard as many other companies. But seeing it laid out can help in the guessing of other names (or common name occurances, as you don't even need a full…
I'm not surprised they don't have a gist/pastebin like app. When I interned at Amazon this summer, they were just developing one, and it was still pretty alpha (persistence was buggy and lost me an entire design review of notes). Facebook is younger, so it seems fair that they don't have one.
Re: A look inside Facebook's source code
#8Somewhat ominous for top HN users: http://pastebin.com/6GeZnS9b
I like that this was written in javascript. Was it meant to be injected onto webpages MITM-style?
Re: A look inside Facebook's source code
#9Interesting. It's also interesting that Facebook developers are using Pastebin for things such as this. I would assume that they'd have an internal wiki, or gist-like app. It's also noteworthy to see how they set up their accounts: first initial, full lastname—same standard as many other companies. But seeing it laid out can help in the guessing of other names (or common name occurances, as you don't even need a full…
I'm not surprised they don't have a gist/pastebin like app. When I interned at Amazon this summer, they were just developing one, and it was still pretty alpha (persistence was buggy and lost me an entire design review of notes). Facebook is younger, so it seems fair that they don't have one.
Facebook has been around for a decade at this point. Youth isn't much of an excuse.
Re: A look inside Facebook's source code
#10Somewhat ominous for top HN users: http://pastebin.com/6GeZnS9b
This was someone's attempt at a bitcoin public challenge: https://news.ycombinator.com/item?id=6765801 (Get a wallet's passphrase which was the username of someone in the Hacker News top 100, minus 2 characters).