Tag: Facebook Hackers

Mark Zuckerberg’s own Facebook schedule hacked by Palestinian researcher

Like many organizations nowadays Facebook or myspace provides a bug resources system for protection scientists to reveal weaknesses in come back for a money transaction.

As lengthy as the insects are eligible under Facebook’s whitehat circumstances, scientists can anticipate a compensate of $500 or more.

Khalil Shreateh, an IT graduate student from Palestine, lately found a weeknesses that permitted an enemy to publish on somebody’s schedule, even if they were not Facebook or myspace ‘friends’ with that individual.

So Shreateh created the decision to show the bug on the schedule of Debbie Goodin, a buddy of Facebook or myspace CEO Indicate Zuckerberg. He then revealed the bug to Facebook or myspace via the whitehat system. According to Shreateh, as Goodin only stocks her content with her buddies, the Facebook or myspace group were incapable to accessibility his publish and responded to tell him they could only see a mistake (sic):

Facebook protection replay was that the weblink gives mistake starting , if course they did not use their power to perspective sarah’s comfort content as sarah discuss her schedule content with her buddies only , i was able to perspective that publish cause i’am the one who did publish it even i’am not in her buddy record. that what i informed them in a replay and i also informed them i may publish to Indicate Zuckerberg timelime

So he revealed it again. Facebook or myspace replied:

I am sorry this is not a bug.

The identified Shreateh then created the decision to increase his business presentation by publishing to Zuckerberg’s own schedule.

Dear Mark Zuckerberg,

First sorry for breaking your privacy and post to your wall , i has no other choice to make after all the reports i sent to Facebook team.

My name is KHALIL, from Palestine .

couple days ago i discovered a serious Facebook exploit that allow users to post to other Facebook users timeline while they are not in friend list .

i report that exploit twice , first time i got a replay that my link has an error while opening , other replay i got was ” sorry this is not a bug ” . both reports i sent from www.facebook.com/whitehat , and as you see iam not in your friend list and yet i can post to your timeline .
“Minutes” after publishing, he was approached by a Facebook or myspace protection professional, Ola Okelola, who requested for more details about the manipulate. According to Shreateh he then had his consideration revoked (it has since been reinstated).

He also published this movie, displaying his exploit:

An professional on Facebook’s protection group, He Jackson, said Facebook or myspace set the bug on Friday but confessed that it should, perhaps, have requested Shreateh for more details.

He managed, however, that Shreateh is not eligible to a bug resources because he breached Facebook’s whitehat circumstances and circumstances and accountable disclosure plan.

OK – so I perform on a protection group at Facebook or myspace and sometimes help with examining Whitehat reviews. To be obvious, we set this bug on Friday. The OP is appropriate that we should have requested for extra repro guidelines after his preliminary review. Unfortunately, all he presented was a weblink to the publish he would already created (on a actual consideration whose approval he did not have – breaking our ToS and accountable disclosure policy), saying that “the bug allow facebook customers to discuss hyperlinks to other facebook users”. Had he involved it clip [he created to show the exploit] originally, we would have captured this much more easily …… However, the more essential problem here is with how the bug was confirmed using the records of actual individuals without their authorization. Taking advantage of insects to effect actual customers is not appropriate actions for a white-colored hat. We allow scientists to create analyze records here: https://www.facebook.com/whitehat/accounts/ to help accomplish accountable analysis and examining. In this situation, the specialist used the bug he found to publish on the timeframes of several customers without their approval.

Even if Shreateh considered he was exposing the weeknesses in a accountable way, Facebook’s bug resources circumstances are obvious

Let’s wish that he won’t have been put off looking for other weaknesses later on, but that when he will create sure he sensibly reveals the bug and can then appreciate enjoying the bug resources benefits.

Alicia keys Death Hoax propagates on Facebook

Rumors of the singer’s claimed death obtained grip on Weekend after a ‘R.I.P. Alicia Keys’ Facebook or myspace web page drawn nearly one thousand of ‘likes’. Those who read the ‘About’ web page were given a credible account of the United states singer’s passing:

“At about 11 a.m. ET on Weekend (July 28, 2013), our dearest artist Alicia Important factors approved away. Alicia Important factors was created on Jan 25, 1980 in New You are able to. She will be skipped but not neglected. Please show your concern and condolences by leaving comments on and preference this web page.”

 

Hundreds of lovers instantly started writing their information of acknowledgement on the Facebook or myspace web page, showing their unhappiness that the skilled 33-year-old artist, artist and songwriter was deceased. And as regular, Twittersphere was rapid over the loss of life scam.

Where as some relying on lovers considered the post, others were instantly doubtful of the review, perhaps learning their session from the large amount of bogus loss of life reviews growing about superstars over latest months. Some outlined that the information had not been taken on any significant United states system, showing that it was a bogus review, as the loss of life of a artist of Alicia Keys’ prominence would be significant information across systems.

Alicia Important factors Death Hoax Ignored Since Singer Is ‘Alive And Well’

On Thursday (July 29) the singer’s repetitions formally verified that Alicia Important factors is not deceased. “She connects the big list of superstars who have been offended by this scam. She is still in existence and well, stop knowing what you see on the Internet,” they said.

Some lovers have indicated rage at the bogus review saying it was careless, upsetting and painful to lovers of the much liked artist. Others say this reveals her excessive reputation across the world.