Facebook Hack: List of Common Past Vulnerabilities And/Or Privacy Weaknesses

 
As I told you yesterday, today am I publishing the list of some of the greatest weaknesses that facebook has encountered this year.
There are classed in three categories:
- Facebook major vulnerabilities,
- Thrid party application vulnerabilities and
- “Privacy” weaknesses.

Color legend: Vulnerability impact level -  HIGH - MEDIUM - LOW
{smartads}
Facebook major vulnerabilities:
- 05/2008: XSS vulnerability (source)
- 08/2008: […]

Tools 4 Facebook Comes Back!

Dear reader,

 
If you are one of these two or three readers who used to come back often to read my new posts, I want to thank you for that and I want to apologize to you for my so long disparition.
 
If you are not one of these two or three readers, this post just don’t […]

Facebook Hack News: Maybe The Biggest Security Threat Facebook Has ever Faced - Its Homepage Source Code Publicly Revealed

On the 15th of August, facebooksecrets.blogspot.com published the homepage (index.php) source code of facebook’s website. Three hours later, the publication, on the blog hosted on the google-owned blogger network, was removed after a DMCA (Digital Millennium Copyright Act) take down notice from Facebook.You won’t find the DMCA notice on facebooksecrets.blogspot.com because this blog has been […]

Facebook News: Facebook Nouveau Design Has Arrived

The new Facebook user design has arrived. Some of you might already know that for a 1 or 2 weeks, for the others you might still have to wait a few hours like a few days or even, who knows, a few week to be able to test it unless you read this little article.
So […]

Facebook Hack: A Photo Looking Back at Your Credentials Exploit - GIFAR part I

Let’s image that you go on a populous and secure website like Facebook for instance. And let’s image that you click on someone profile picture just to see it. After all, you’re on a secure website and a website like facebook will not allow redirection, isn’t it?!!! It is probably right, a website like Facebook, […]

Facebook News: Believe it or Not -The Ugliest Facebook Profile has Just Been Revealed

9th of August 2008: I am sorry guys, but it seems that, for an obscure reason, Facebook has blocked this joke!!!! So it is not working anymore!!!
According to the FUCA 8.1 (Facebook Ugliest Contest Award - first semester 2008), Facebook users have voted for the ugliest Facebook profile. This is the first contest […]

Facebook News: Hackathon

If you like late-night Chinese food, Red Bull, Office Ripstik races and Rock Band Jam sessions, this f8 hackathon is just for you.
You might also contribute to build the facebook platform of tomorrow:
“Hackathon is an all-night-long hack session that gives every Facebook engineer a chance to work on that awesome feature they’ve been meaning to […]

Facebook News: Protecting User Privacy by Example: Top Friends suspended

 
Facebook published on the 27th of June an article about “Building Trust and Protecting User Privacy” because “Privacy is at the core of Facebook”.
Because ” Facebook work to help clarify standards and maintain user trust” in applications available on Facebook, they recently suspended “Top Friends“, an application used by millions of users, one of the […]

Facebook News: Facebook in Number

13 months after the inaugural f8 facebook even (it was on the 24th of May 2007), following are some numbers about the facebook ecosystem:
- 400.000+ Developers (in more than 160 different countries)
-  24.000+ Applications in the Directory
- 80.000.000 active Users
And, as you can see on the Alexa graph above and in term of percent, for […]

Facebook News: Experience Applications Without the need to install it

Still a week ago, if you wanted to test a facbook application you had to install it and let it access to personal information.
Now… you still have to let the application access to personal information but, after a few tests, if you don’t like the application you don’t need to edit your profile settings to […]

SRTH SRTH