How would you feel if you know that your Facebook account can be tampered with by company technicians without having to have your credentials?
Earlier this week, director Anjunabeats, Paavo Siljamäki, drew attention to this issue by publishing a very interesting story on his Facebok wall. During his visit to the Facebook office in Los Angeles, a technician Facebook was logged in to his account after he got his license, but the strange thing he could do was to do it without using a password.
After that Siljamäki contacted Facebook wanting to find out how many of the company's staff have this kind of access to their Facebook account, when exactly they can access their personal data users, and also how each of us will know that someone from Facebook has logged into our account.
Facebook issued the following statement according to Venturebeat:
"We have strict administrative, physical and technical controls that are able to restrict employees' access to user data. Our audits have been evaluated by independent third parties and have been confirmed several times by the Office of the Irish Data Protection Commissioner, in the context of our audit. ”
However, the company did not exactly explain who can access, but assured its users that account access is staggered and limited to specific workgroups. Account access is granted to employees in response to a client's request for information or platform errors.
Special employees may only have access to the amount of information necessary for the implementation of their duties, such as responding to bug reports or account support queries. We have a zero-tolerance approach to abuse, and inappropriate behavior.”
In short, the company seems to have one tool Customer Service that can give Facebook employees access to each user's account. The company runs two separate monitoring systems that generate weekly reports of suspicious behavior which are then reviewed and analyzed by two independent security teams, consisting of a specially selected team of employees. These employees, according to the company, are considered reliable…
Read the publication of Paavo Siljamäki
//
