Facebook security hole allows viewing of private photos

Post by mkjones » Wed, Dec 07, 2011, 6:29 AM UTC

aw3c2 wrote: post #140

mkjones wrote: post #120

Earlier quoted context omitted.

I don't think we post any details about the exploit, just the fact that someone reported it (see https://www.facebook.com/whitehat ). Of course, once we've fixed the bug, the reporter is free to write about the exploit, how long it was live, etc.

I did not mean details about the exploit but details about what the exploit enabled an attacker to do/see.

Post by aw3c2 » Wed, Dec 07, 2011, 8:57 PM UTC

alastair wrote: post #142

mkjones wrote: post #141

Earlier quoted context omitted.

Yeah, after it's been fixed the person who discovered it is welcome to post details about what it would allow an attacker to do / see / etc.

I think what the OP is trying to say, is that Fackbook (as the custodian of our private data) should make available a list of resolved exploits such that we may be aware of potential data leaks. Eg - up until today, and for who knows how long, photos you thought were private may have been accessed by undesireables.