Live data from Hacker News

Getting any Facebook user's friend list and partial payment card details

josipfranjkovic.com

11–20 of 95 posts

Re: Getting any Facebook user's friend list and partial payment card details

#12
post #11
post #2

Important last-line: "It took Facebook's team 4 hours and 13 minutes to fix the issue - the fastest report-to-fix for me."

Wow. That is extremely impressive that such a large company is able to get a fix out that quickly.

If it took much longer than that for bugs like this, all of the HN doomsday posts about the Facebook mass exodus might actually come true

Re: Getting any Facebook user's friend list and partial payment card details

#14

Wait, why would facebook have CC info? I have never paid facebook for anything (except in terms of ad views), and I'm not even sure what I could pay them for? Posting ads I guess? But that's gonna be not a lot of people. So if somehow their graph api has pulled up my credit card number into their database, that's the disturbing thing...

They've had previous monetization methods, as well as submitting donations, sending cash to friends, paying for advertising, etc.

Re: Getting any Facebook user's friend list and partial payment card details

#15
post #7
post #6

Earlier quoted context omitted.

You should vs human nature. We introduce bugs. Please don't be cynical, and cheer this up. Kudos to facebook team that they responded shortly, I cannot tell if it was work hours or not, but either way, this is very very short in the context of large corporations.

I don't read at all the cynicism you seem to read. A: that was fast! B: that's because it was very serious! Where is the cynicism? Can it not be summarized as: they fixed a serious issue very quickly?

"That's because you should never have first 6 and last 4 in the same place at the same time, particularly to someone who is not the owner of the card!"

Sounded to me more like "of course they fixed it fast, this is a serious issue", and undermined the speed it get resolved. Probably my bad.

Re: Getting any Facebook user's friend list and partial payment card details

#16
post #13
post #2

Important last-line: "It took Facebook's team 4 hours and 13 minutes to fix the issue - the fastest report-to-fix for me."

".. Facebook's team .." Most likely a single dedicated person at FB.

I guess it's cultural, but I have observed many times that especially in America, there is a lot of emphasis on individualism - the cult of the person and their own achievements is placed above all else.

Even if the fix was done by one "dedicated employee" , they still belong to a team of people working together. I feel like singling out one person like this is almost rude to the rest of the team.

Re: Getting any Facebook user's friend list and partial payment card details

#17
post #13
post #2

Important last-line: "It took Facebook's team 4 hours and 13 minutes to fix the issue - the fastest report-to-fix for me."

".. Facebook's team .." Most likely a single dedicated person at FB.

Do you mean that FB only has one single dedicated person looking at Whitehat tickets or that a single developer made the fix?

Re: Getting any Facebook user's friend list and partial payment card details

#18

Wait, why would facebook have CC info? I have never paid facebook for anything (except in terms of ad views), and I'm not even sure what I could pay them for? Posting ads I guess? But that's gonna be not a lot of people. So if somehow their graph api has pulled up my credit card number into their database, that's the disturbing thing...

> Posting ads

Advertisement is Facebook's #1 revenue model, its literally why they exist. I wish everyone who's used FB would sign up for a business page and place an ad; it's illuminating to see just how detailed their tools are.

Same with Google PPC and Bing etc etc.

I shudder to think at just how detailed the profiles are that FB, AMZN et al keep on each of its users.

Re: Getting any Facebook user's friend list and partial payment card details

#19
post #13

Earlier quoted context omitted.

".. Facebook's team .." Most likely a single dedicated person at FB.

Do you mean that FB only has one single dedicated person looking at Whitehat tickets or that a single developer made the fix?

A single developer made the fix.

Re: Getting any Facebook user's friend list and partial payment card details

#20
post #11
post #2

Important last-line: "It took Facebook's team 4 hours and 13 minutes to fix the issue - the fastest report-to-fix for me."

Wow. That is extremely impressive that such a large company is able to get a fix out that quickly.

The fix is probably 10 minutes but the deployment process, intake process and notification process took 3 1/2 hours
Post reply on HN