Skip to main content

50 Million Facebook Accounts Compromised, Is Your Business Page Safe?

The security breach which was discovered by Facebook (NASDAQ: FB) engineers on September 25 allowed the attackers to take direct control over user accounts; around 50 million of them to be exact.

The Latest Facebook Security Breach

In addition to the 50 million, Facebook also said there were another 40 million accounts which were potentially vulnerable. All said, the company logged out 90 million accounts to prevent further damage.

In a security update, Facebook admitted the attack was able to exploit the complex interaction of multiple issues in its code. This came about from a change the company made to its video uploading feature in July of 2017 affecting the “View As” feature.

Facebook said, “The attackers not only needed to find this vulnerability and use it to get an access token, they then had to pivot from that account to others to steal more tokens.”


This attack couldn’t have come at a worse time for Facebook. The company is trying to ratchet up its security before the upcoming mid-term elections while at the same time trying to recover from the Cambridge Analytica fiasco in which data from about 87 million users was shared with a political consulting agency.

The View As Feature

  1. The View As feature allows users to see how a profile looks to other people.
  2. The attackers were able to exploit three flaws or bugs in the “View As” feature. In the same security update, Pedro Canahuati, Vice President of Engineering, Security and Privacy, listed those flaws as follows:

  4. View As incorrectly provided the opportunity to post a video.
  5. A new version of the video uploader (the interface that would be presented as a result of the first bug), introduced in July 2017, incorrectly generated an access token that had the permissions of the Facebook mobile app.
  6. When the video uploader appeared as part of View As, it generated the access token NOT for the viewer, but for the user the viewer was looking up.
  7. Facebook said it has turned off the View As feature temporarily while it conducts a security review.

Tricking Facebook to Issue Access Tokens

With this vulnerability, the attackers were able to trick Facebook into issuing them access tokens. This gave them access to user accounts as if they were the user.

They also had access to services the user might’ve registered for using Facebook such as Airbnb, Spotify, Tinder or other apps and games.


Facebook has reset the access tokens of the 50 million accounts that were affected as well as the additional 40 million accounts that might’ve been vulnerable.

If your account was one of the 90 million affected by this incident, you will be prompted to re-login on Facebook and any linked accounts.

Who is Responsible?

In a conference call (PDF) Guy Rosen, Vice President of Product Management for Facebook said the company has notified law enforcement and is working with the FBI.

As to who is responsible, Rosen goes on to say it is hard to discover who was behind the attack, adding “We may never know.”

Labels:

Popular posts from this blog

EGYPTIAN PASSPORT VISA FREE COUNTRIES 2018 LIST

LIST OF EGYPTIAN PASSPORT VISA FREE COUNTRIES 2018 There is a certain number of benefits available to the Egyptians citizens in the event of traveling around the world. Egypt has stood out to become one of the zenith priority of many outsiders for years now who prefer transacting business and exchange of good and services due to wonderful business climate and its uninterrupted power supply or also for some they prefer the passport just for tourist purposes. This post on Egyptian passport visa free countries list.Besides its enormous side attraction like Egyptian streets, cozy places, their food, culture especially “Herafeyyeen” and others, it has a good economic system that is favorable for trade which is boosted by a soothing atmosphere. An Egyptian passport holder has a good reason to be joyful about their flight escapade across the world. Egyptian Passport Visa Free Countries Ditto for long some passport holders never knew the countries they can access with free days and ...
Read more

Silicon eyed as way to boost electric car battery potential

The race to build a better electric car battery is turning to silicon, with several companies working to engineer types of the material that can boost driving range and cut production costs. About 500,000 electric vehicles (EVs) were sold globally in 2016, a figure that is expected to jump sevenfold by 2022, according to the U.S. Energy Information Administration. That increase is forecast to be helped by government mandates to cut tailpipe emissions by banning gasoline and diesel-powered cars. But many drivers have so far been put off by the high cost of EVs and worries about driving range, which so far is limited to a few hundred miles (kilometers) before needing a charge. But silicon could, if adopted en masse for EV batteries, help boost energy storage. One such company, California-based Sila Nanotechnologies, aims to have its technology in over a million electric vehicle (EVs) batteries by the middle of the next decade, Chief Executive Gene Berdichevsky said in an interview. Silic...
Read more

Pakistani Girls Mobile Numbers Girls Contact Number Pakistani Girls Contact Number 2018 sobia sha

Name: Zainab Malik Age: 20 Years Hobbies: Photography Study: B.Com City: Kasur Province: Punjab Country: Pakistan Contact Number: 0302-9161253 Name: Samra Butt Age: 22 Years Hobbies: Having Fun Study: BBA City: Larkana Province: Sindh Country: Pakistan Contact Number: 0333-2904432 Name: Nida Haq Age: 24 Years Hobbies: Cooking Study: Masters in English City: Gujrat Province: Punjab Country: Pakistan Contact Number: 0344-4393174 Name: Mehak Sumroo Age: 18 Years Hobbies: Being Free is my hobby Study: FA City: Shekhupura Province: Punjab Country: Pakistan Contact Number: 0323-2360492 Name: Sanam Marwa Age: 20 Years Hobbies: Chatting, Facebooking, Tweeting Study: ACCA City: Mardan Province: Khyber-Pakhtunkhwa Country: Pakistan Contact Number: 0312-3651507 Name: Nimra Saeed Age: 22 Years Hobbies: Gardening Study: BBA City: Jhang Province: Punjab Country: Pakistan Contact Number: 0302-0965897 Name: Sabeha Age: 23 Years Hobbies: Sports and Chit Chat Study: MBA City: Sukkur Province: Sindh Coun...
Read more