Empty dupe also on front page: https://news.ycombinator.com/item?id=18094852
Thanks! We've duped it.
Facebook Network Breach Impacts Up to 50M Users
11–20 of 635 posts
Re: Facebook Network Breach Impacts Up to 50M Users
#12Isn't this what happens at Facebook 24/7/365, just this time it wasn't authorized/paid for?
No, this affected only 50M users.
Re: Facebook Network Breach Impacts Up to 50M Users
#13> This attack exploited the complex interaction of multiple issues in our code. It stemmed from a change we made to our video uploading feature in July 2017, which impacted “View As.”
Obviously, Facebook is an extremely complicated system. But I find it hard to believe a video uploading feature would impact 'View As'.
Re: Facebook Network Breach Impacts Up to 50M Users
#14Isn't this what happens at Facebook 24/7/365, just this time it wasn't authorized/paid for?
Because ot was not network breach (i.e. get dump from some db), but abuse of feature available in the web app (so they had good logs to see who was affected).
Re: Facebook Network Breach Impacts Up to 50M Users
#15Is it wrong to be glad FB's reputation has tarnished (and stock price sideways) over the past year or so? For so long they've monopolized the talent pool in the Bay Area. If more people decide 1) they don't want to work at FB and 2) FB employees are itching to leave then I see any stain on FB's employment brand as a net positive to the greater tech + startup ecosystem.
That's fine, but it would be okay with those of us who live elsewhere if maybe the tarnishing didn't come as a result of things like this.
Re: Facebook Network Breach Impacts Up to 50M Users
#16> This attack exploited the complex interaction of multiple issues in our code. It stemmed from a change we made to our video uploading feature in July 2017, which impacted “View As.” Obviously, Facebook is an extremely complicated system. But I find it hard to believe a video uploading feature would impact 'View As'.
Mayve it has some complicated privacy rules?
Re: Facebook Network Breach Impacts Up to 50M Users
#17I wonder where the "50M users" estimate comes from. It seems like the feature that caused it, "View As", is probably available to more than that many people. Does this mean that they managed to trace the attacker capturing the access tokens of 50M users? Even allowing for the bug in the first place, it seems like exploiting it should be detected before 50M uses.
Re: Facebook Network Breach Impacts Up to 50M Users
#18So that's why I had to re-login this morning.
Re: Facebook Network Breach Impacts Up to 50M Users
#19Did not mention what was leaked/taken or how 50M and not everyone.
> Since we’ve only just started our investigation, we have yet to determine whether these accounts were misused or any information accessed. We also don’t know who’s behind these attacks or where they’re based. We’re working hard to better understand these details — and we will update this post when we have more information, or if the facts change. In addition, if we find more affected accounts, we will immediately reset their access tokens.
From the press release[0] posted elsewhere in this thread
Re: Facebook Network Breach Impacts Up to 50M Users
#20I h8 them