Hold on tight: Hackers είναι σε θέση να αποκτήσουν access σε ονόματα, αριθμούς τηλεφώνου, εικόνες γενικότερα στα δεδομένα του Facebook, using only one mobile phone number.
Vulnerability in the social network was discovered by researcher Reza Moaiandin.
Moaiandin is a technology manager in the company Salt.agency, from the UK, and managed to breach Facebook by exploiting a little-known privacy setting on a feature called "Who can look for me?” This feature is set to “Everyone/Public” by defaultchoice, even in cases where the user has decided not to display their mobile number through their public profile.
The result was that Moaiandin could find Facebok users by typing their phone number on the social network. They could also have their names, their profile photos, and their existing profiles. This process can be programmed and automated through Facebok's API.
Let's say the best protection against such security issues is not to post something that you do not want to use against you.
Facebok can easily block automated data collection using the Moaiandin technique.
Moaiandin first posted on Facebook about the security issue in April before posting it publicly last week.
What the researcher says is that there is a privacy issue and not just a security vulnerability. In response, Facebok issued a statement indicating that it underestimates the issue, arguing that the percentage collection of data is not great, as controls are limited.
"Protecting the privacy of people who use Facebook is very important to us. We have the best tools always-on network monitoring to ensure data security, and we have strict rules governing how developers can use our APIs to build their products.”said Facebook spokesman.
"Developers are able to access information that people have chosen to leave public," he added.
“Everyone who uses FaceBook has control of the information they share, and that includes the information contained in their profiles. At Basically for the protection of personal data there are a number of useful guides explaining how our members can secure their account ”, added the social network spokesman.
See the publication mentioning the Facebook bug.
