4 ms·
I once (2009) found a similar bug that allowed leaking the ID and personal info of a FB user when their browser loaded a seemingly innocent <img> tag (so it cou
by air7 8y ago
I once (2009) found a similar bug that allowed leaking the ID and personal info of a FB user when their browser loaded a seemingly innocent <img> tag (so it could be embedded in a forum post, for example).
Sadly, it was before FB had a bug bounty program, so I didn't receive anything after I contacted them and they fixed the issue. I wrote about it here: http://blog.quaji.com/2009/07/facebook-personal-info-leak.html http://blog.quaji.com/2009/07/facebook-personal-info-leak.ht...
- Chris_Chambers 8y agoUsing a Facebook exploit for anything less than causing as much damage to Facebook as possible is a sign of severe moral impotence. Siding with Facebook and selling out for their bug bounty bribe is bad enough, but to do it for free deserves some sort of punishment.
- wolco 8y agoIn 2009 they had private photos exploits, login exploits and all other kinds open access issues. Fun times.
- notafrog 8y agoA friend of mine used to have a Facebook page with about 180k fans back in 2008 or 2009. He was so greedy, he found some "javascript code to increase fans" and ended up giving admin rights to the page to some "hackers". Then Facebook started requiring a password to make changes to page administrators, but they never returned the page to him.