Be *VERY* Carfeul of using a Facebook Punting Profile
reposting this into correct section..
There's been a lot of FaceBook related security concerns recently.
If you're considering using a 'Punting FB' profile- make sure you know what the f*ck you're doing guys (v long story short- it's extremely risky)
Recent US thread on this specific topic- the guy just 'couldn't figure out why' his former civi fling had found his Punting FB profile.. Facebook uses search algorithms that cross references troves of minutiae such as cookies and a lot of other stuff, even if you never put any personal info on the Hobby FB profile it can very easily get triangulated through other channels- see links below for more details...(hint- forget the law: unless you really know how to go about this, a Punting FB Profile may be found by your employer/bank/divorce solicitor etc from here to eternity!)
Facebook cross-site tracking.
Will you take Facebook’s candy?
Facebook 'eliminates most of porn image spam attack'
16 November 2011
Security experts say the attack could be directed against other websites
Facebook said it has rid its site of most of the pornographic and violent images posted as part of a spam attack.
The social network blamed a browser vulnerability and said it was improving its systems to defend itself against similar attacks in the future.
Thousands of the website's 800 million users have complained about the pictures over recent days.
A source told the BBC that Facebook knew who was responsible - and it was not an Anonymous hacktivist.
The firm is understood to be working with its legal department to take action against the suspected attacker.
Browser exploit
Facebook said the spam attack worked via a "self-XSS vulnerability in the browser".
It added: "During this attack, users were tricked into pasting and executing malicious javascript in their browser URL bar causing them to unknowingly share this offensive content.
"No user data or accounts were compromised during this attack."
The firm said its engineers had built enforcement mechanisms to shut down malicious pages and accounts that attempt to exploit the vulnerability.
It also offered the following advice to help guard against further attacks:
- Never copy and paste unknown code into the address bar
- Always use an up-to-date browser
- Use the report links on Facebook to flag suspicious behaviour or content on friends' accounts
Continue reading the main BBC story
Reply With Quote
Originally Posted by Franken996
)... but it'd be wise for users to understand it's the exact opposite of a private forum such as EI, Zuckerberg's empire is a business just like this place but the scope of what FB does is so wildly invasive in a <generally> not so obvious manner it's scary
