Hacker posts Facebook bug report on Zuckerberg's wall
A Palestinian information system expert says he was forced to post a bug report on Mark Zuckerberg's Facebook page after the social network's security team failed to recognize that a critical vulnerability he found allows anyone to post on someone's wall. The vulnerability, which was reported by a man calling himself ‘Khalil,' allows any Facebook user to post anything on the walls of other users - even when those users are not included in their list of friends. He reported the vulnerability through Facebook's security feedback page, which offered a minimum reward of US$500 for each real security bug report.
However, the social network's security team failed to acknowledge the bug, even though Khalil enclosed a link to a post he made on the timeline of a random girl who studied at the same college as Facebook CEO Mark Zuckerberg.
"Sorry, this is not a bug," Facebook's security team said in response to Khalil's second report, in which he offered to reproduce the discussed vulnerability on a test account of Facebook security expert. After receiving the reply, Khalil claims he had no choice but to showcase the problem on Mark Zuckerberg's wall.
Senior Member
Posts: 7382
Joined: 2003-07-23
Anyone who believes their information on facebook is secure has to be stupid. While the average person wouldn't matter. There are plenty of important people that will be targeted for information from facebook. Business thrives off information for its war on winning influence to get those deals, or to find out info on what rivals companies are making for products.
For example: AMD would surely love to find out a Nvidia engineers personal life, then find a way to perhaps send a agent to that person and befriend him. In the future, perhaps find out crucial information about their technology. This type of stuff use to be exclusive to spies in the 80's Cold War, but now with modern practically, manipulation is used day by day in business.
Maybe not AMD or Nvidia, but that was a example, we're talking millions of dollars at stake for some companies that depend on their next product line to make or break companies. This type of stuff does happen, you think hackers are not a high demand skill?
Perhaps Zuckerberg and facebook don't care about protecting security because they have business interests to allow other companies or people to take whatever information they want out of facebook. They may not give users information from facebook to anyone, but they surely are not preventing hackers from getting info out of their system.
It always amazes me the amount of info people store on Facebook. Mobile numbers, address etc. No wonder there is so many hackers about these days.
Senior Member
Posts: 25214
Joined: 2007-08-23
Zuckerburg should offer him a job...
Senior Member
Posts: 2843
Joined: 2009-09-15
I quote from the article:
".....He reported the vulnerability through Facebook's security feedback page, which offered a minimum reward of $500 for each real security bug report."
$500? Come on you cheap b*asterds. Multi-Multi-Multi Billion fortune Company and you give just $500 to someone who in the end make your money machine, even better?
A minimum of $5000 should be offered and you will see how many security and other faults/bug will be discovered.
Then maybe, only maybe, Facebook will be much more secure.
Senior Member
Posts: 13870
Joined: 2003-05-24
Facebook is for people that want an crave atention Facebook and all the other social webites will never be secure just like they are always watched by the goverments, but then i never liked those social websites, so i bias
Senior Member
Posts: 295
Joined: 2013-07-21
Anyone who believes their information on facebook is secure has to be stupid. While the average person wouldn't matter. There are plenty of important people that will be targeted for information from facebook. Business thrives off information for its war on winning influence to get those deals, or to find out info on what rivals companies are making for products.
For example: AMD would surely love to find out a Nvidia engineers personal life, then find a way to perhaps send a agent to that person and befriend him. In the future, perhaps find out crucial information about their technology. This type of stuff use to be exclusive to spies in the 80's Cold War, but now with modern practically, manipulation is used day by day in business.
Maybe not AMD or Nvidia, but that was a example, we're talking millions of dollars at stake for some companies that depend on their next product line to make or break companies. This type of stuff does happen, you think hackers are not a high demand skill?
Perhaps Zuckerberg and facebook don't care about protecting security because they have business interests to allow other companies or people to take whatever information they want out of facebook. They may not give users information from facebook to anyone, but they surely are not preventing hackers from getting info out of their system.