4 ms·

> That’s why at Facebook we spend a lot of our energy making our services and the whole internet safer and more secure. We encrypt communications, we use secure

by byoogle 13y ago

> That’s why at Facebook we spend a lot of our energy making our services and the whole internet safer and more secure. We encrypt communications, we use secure protocols for traffic, we encourage people to use multiple factors for authentication and we go out of our way to help fix issues we find in other people’s services. I have to call “bs” here. It took Facebook nine years – nine years! (2004–2013) – to turn HTTPS on by default (http://nakedsecurity.sophos.com/2012/11/19/facebook-https-t-shirt/ http://nakedsecurity.sophos.com/2012/11/19/facebook-https-t-...). Beforehand, anybody on your network could trivially hijack your Facebook session to gain access to your account (I made a video two years ago about how easy this attack was [and is] if you don’t know what I mean: http://youtu.be/g5mFbgxMHqQ?t=1m33s http://youtu.be/g5mFbgxMHqQ?t=1m33s).

RyJones 13y ago
Of course, FireSheep automated this attack in 2010. http://codebutler.com/firesheep/ http://codebutler.com/firesheep/
deleted 13y ago
[deleted]
panarky 13y ago
Pot, kettle, black[0] From Facebook's current privacy policy[1]: We allow anyone with your contact information to find you through the Facebook search bar at the top of most pages, as well as other tools we provide, such as contact importers - even if you have not shared your contact information with them on Facebook Random news items from last few years[2] Facebook Removes Crucial Privacy Setting for Users’ Names Facebook is improperly altering its privacy policy without proper user consent Using names, images, and content of Facebook users for advertising without consent Senator Al Franken has called on Facebook to reconsider expansion of its facial recognition activity Facebook’s Beacon program disclosed personal information without user consent Instagram announced several changes to the terms of service that will allow the company to use pictures in advertisements without notifying or compensating users Instagram proposed that the parents of minors implicitly consent to the use of their childrens' images for advertising purposes Facebook removed a privacy control that allowed users to hide themselves from strangers through Facebook’s search function 88% of Facebook Users Oppose Changes to Privacy Policy and Voting Rights Facebook has proposed changes to its policies that would (1) end user voting, (2) remove spam blocking, and (3) share FB user data with affiliates without user consent Consumer Groups Ask FTC to Investigate Facebook-Datalogix Data-Matching Arrangement Facebook is under a 20 year consent decree from the FTC that requires express consent from users before disclosing personal information [0] http://www.urbandictionary.com/define.php?term=Pot%20Calling%20the%20Kettle%20Black&defid=5909637 http://www.urbandictionary.com/define.php?term=Pot%20Calling... [1] https://www.facebook.com/about/privacy/your-info-on-fb https://www.facebook.com/about/privacy/your-info-on-fb [2] http://epic.org/privacy/facebook/ http://epic.org/privacy/facebook/
- zaqokm 13y ago
  > Pot, kettle, black[0] While I am not trying to be an apologist for Facebook, I would like to point out that the majority of issues with Facebook are because people are members. It is easy to opt out of Facebook. I would like to see you opt out of NSA monitoring. A lot of the actions which the NSA took and take are not made public, you data is collected from means which could be described as subterfuge, if not bordering on illegal. The NSA isn't upset with Snowden for exposing their tactics, their upset because they got exposed altogether. They will continue to go down the path of monitoring citizens, and collecting data with or without your permission. And you will never see them [NSA] offer a Terms and Conditions policy or a Privacy Policy.

by byoogle 13y ago

RyJones 13y ago

Of course, FireSheep automated this attack in 2010. http://codebutler.com/firesheep/ http://codebutler.com/firesheep/

deleted 13y ago

[deleted]

panarky 13y ago

Pot, kettle, black[0] From Facebook's current privacy policy[1]: We allow anyone with your contact information to find you through the Facebook search bar at the top of most pages, as well as other tools we provide, such as contact importers - even if you have not shared your contact information with them on Facebook Random news items from last few years[2] Facebook Removes Crucial Privacy Setting for Users’ Names Facebook is improperly altering its privacy policy without proper user consent Using names, images, and content of Facebook users for advertising without consent Senator Al Franken has called on Facebook to reconsider expansion of its facial recognition activity Facebook’s Beacon program disclosed personal information without user consent Instagram announced several changes to the terms of service that will allow the company to use pictures in advertisements without notifying or compensating users Instagram proposed that the parents of minors implicitly consent to the use of their childrens' images for advertising purposes Facebook removed a privacy control that allowed users to hide themselves from strangers through Facebook’s search function 88% of Facebook Users Oppose Changes to Privacy Policy and Voting Rights Facebook has proposed changes to its policies that would (1) end user voting, (2) remove spam blocking, and (3) share FB user data with affiliates without user consent Consumer Groups Ask FTC to Investigate Facebook-Datalogix Data-Matching Arrangement Facebook is under a 20 year consent decree from the FTC that requires express consent from users before disclosing personal information [0] http://www.urbandictionary.com/define.php?term=Pot%20Calling%20the%20Kettle%20Black&defid=5909637 http://www.urbandictionary.com/define.php?term=Pot%20Calling... [1] https://www.facebook.com/about/privacy/your-info-on-fb https://www.facebook.com/about/privacy/your-info-on-fb [2] http://epic.org/privacy/facebook/ http://epic.org/privacy/facebook/

zaqokm 13y ago
> Pot, kettle, black[0] While I am not trying to be an apologist for Facebook, I would like to point out that the majority of issues with Facebook are because people are members. It is easy to opt out of Facebook. I would like to see you opt out of NSA monitoring. A lot of the actions which the NSA took and take are not made public, you data is collected from means which could be described as subterfuge, if not bordering on illegal. The NSA isn't upset with Snowden for exposing their tactics, their upset because they got exposed altogether. They will continue to go down the path of monitoring citizens, and collecting data with or without your permission. And you will never see them [NSA] offer a Terms and Conditions policy or a Privacy Policy.