“Popped to Facebook offices in LA, the nice people there were giving us good advice on how to use Facebook better,” he wrote. “I was then asked if I’m ok for them to look at my profile, I said ‘sure.’ A Facebook engineer can then log in directly as me on Facebook seeing all my private content without asking me for the password.”
Facebook’s Zero Tolerance Policy – Protection Enough?
Well, of course, they can do that, you say. But it’s not something people think of every time they log into Facebook. And with Facebook used as a way to log into so many other sites these days, a whole new level of security vulnerability presents itself.
After the story got attention from Siljamäki’s legion of fans, a Facebook employee (see below) took the time to make comment in such a way that did not deny this access. Instead, it justified the access as being limited and used only by those who have a strict need to use it. Additionally, they claim there are bi-weekly audits of access logs.
But, if that’s the case, the damage would already be done, wouldn’t it?
Against Their Own Terms
The Facebook engineer who accessed Paavo Siljamäki’s account violated the terms of service, nowhere in which is it outlined situations under which Facebook itself might go into the accounts of its users. One thing it does say, however, is that you’re not allowed to use other people’s Facebook accounts or allow others to use your account.
(3.5) You will not solicit login information or access an account belonging to someone else.
(4.8) You will not share your password (or in the case of developers, your secret key), let anyone else access your account, or do anything else that might jeopardize the security of your account.
The terms don’t exempt Facebook employees. So, even though Facebook appears to have an extensive internal policy covering these activities, and may even take it seriously, the Facebook accounts of all the people who’ve done this should be disabled.
The time has come for decentralized social networking to replace the Facebook hegemony on identity. This company makes billions by trafficking in the data on children as young as thirteen. People have become the product, in many cases unwittingly. People always point to the fact that these things are governed by terms of service, but that doesn’t go far enough.
This case is an example of an action Facebook allows itself to take which is not expressly obvious to users. A jilted lover who happens to be a Facebook engineer could do a great deal of damage to his or her ex-lover’s life before getting fired, and that’s just one situation which seems realistically possible.
At the very least, the actual access should be evident to the user. We can reasonably expect that if the government wants to know what’s going on in our Facebook accounts, they will. But an engineer with this level of access could in good faith be fooled by someone who is simply social engineering, pretending to be someone they are not, and in some cases the damage can be irreversible.
San Bernadino iPhone Case: Major Press Agencies Are Suing the FBI
The Associated Press, Gannett, and VICE Media are suing the FBI to know more details about the agency’s hack of the San Bernadino killer’s iPhone.
Toward Unbreakable Quantum Encryption for Everyone
Hacked recently covered the efforts of the Chinese government to build unbreakable quantum communication networks. According to analysts, quantum communications networks are so expensive that they could have a “recentralizing effect,” enabling states to recover the ground that they have lost to decentralizing digital technologies. But what if ultra-secure quantum cryptography could be made available to everyone at low cost?
The Chinese Quantum Satellite QUESS: Toward Unbreakable Quantum Networks
One year ago Hacked covered the race between the US and China to develop “military super-powers” by harnessing quantum science, and noted that Chinese scientists were developing quantum communication satellites that support unbreakable encryption. A few weeks ago, China launched its first quantum satellite.
- Asian Market Update – Tuesday: Litecoin price skyr...
- Technical Analysis: Litecoin Continues Surge as Bi...
- Trade Recommendation: Stellar
- Trade Recommendation: Bitcoin Cash
- Bitcoin Plunges $2,000 on Eve of Futures Contract
- Monero Forges Ahead as Prices Cross $290
- Ethereum Flirts With Record Highs as Buterin Compa...
- Trade Recommendation: Bitcoin Cash December 12, 2017
- Is Bitcoin Stealing Gold’s Luster? December 12, 2017
- Asian Market Update – Tuesday: Litecoin price skyrockets despite creator’s warning; Asian stocks down December 12, 2017
- Is Bitcoin Driving Gold Prices Lower? December 12, 2017
- Monero Forges Ahead as Prices Cross $290 December 12, 2017
- Ethereum Flirts With Record Highs as Buterin Compares Crypto Surge to Salvator Mundi Auction December 12, 2017
- Altcoin Investing Strategy as Futures Hit the Market December 12, 2017
- Companies are Lining Up to Launch Bitcoin ETF, According to SEC December 12, 2017
- Technical Analysis: Litecoin Continues Surge as Bitcoin Tests Highs December 11, 2017
- Trade Recommendation: Ride ETN and EW on Breakout December 11, 2017
A part of CCN
Analysis1 week ago
Long-Term Cryptocurrency Analysis: A Major Top Could Be In
Altcoins1 week ago
IOTA Doing Big Things as Microsoft Partnership Announced
Analysis3 days ago
Long-Term Cryptocurrency Analysis: Look Out Below?
Recommendations4 days ago
Trade Recommendation: Litecoin
Cryptocurrencies1 week ago
Trade Recommendation: Neo
Analysis1 week ago
$100 Litecoin Looks Poised for Greater Upside
Cryptocurrencies1 week ago
Trade Recommendation: Zcash
Cryptocurrencies4 days ago
Trade Recommendation: Stellar