Facebook employees can access your account, passwords not needed
1–10 of 15 posts
Re: Facebook employees can access your account, passwords not needed
#2I don't think I've worked on an app where at least some people inside the company couldn't log into anyone else's account. It's useful for debugging, and when you're developing the app, you need a way to switch users pretty frequently.
Re: Facebook employees can access your account, passwords not needed
#3This seems pretty obvious. Someone has to have access to keep the thing running. I don't really get the point of this article.
Re: Facebook employees can access your account, passwords not needed
#4They probably have some auditing in place, but impersonation capability is fairly common practice.
Re: Facebook employees can access your account, passwords not needed
#5I worked on a local social network for a while and it also worked like this, even more blatantly (we had a built-in function that made us see the profile of an user exactly the way they saw it, to check bug reports and such). There were some not very nice consequences; I remember a case where a few guys gathered around a computer when someone was looking at a hot girl's private photos (there was nothing revealing, just close pictures and such). EDIT: someone has mentioned auditing; I remember that yes, we audited who did what.
Frankly, I thought everyone assumed that this worked as that, at least in the technical circles.
Re: Facebook employees can access your account, passwords not needed
#6This should never be surprising. You must always assume that if your content is stored in the clear on a third party's resources, someone can and will poke through it.
I remember some of the high level Myspace employees bragging about how they would thumb through private messages when they were bored. And early day IRC mods saying the same. And dialup BBS admins. My mom opened my mail when I was a kid.
The amount of deeply intimate information that people transmit on Facebook makes me shudder.
Re: Facebook employees can access your account, passwords not needed
#7TIL the company that owns the servers, code and database can actually access them whenever they want.
Re: Facebook employees can access your account, passwords not needed
#8[deleted]
Re: Facebook employees can access your account, passwords not needed
#9Well, of course they do. But they also have extremely strict rules about when you can access what user data and why. Employees can and do get fired for minor infractions of those rules.
Clickbait article?
Re: Facebook employees can access your account, passwords not needed
#10Well, of course they do. But they also have extremely strict rules about when you can access what user data and why. Employees can and do get fired for minor infractions of those rules. Clickbait article?
Yep, this isn't news at all, I remember reading an interview with an employee which they stated that every account access was logged and anyone that was found accessing information for non-valid reasons would be fired (I can't remember if they also pressed charges).