Skip to main content

Facebook Security Flaw: See your Friends’ chats

A famous blog has pointed out a shocking security flaw in Facebook that allows users to see the live chats.

There is an option in privacy settings, under personal information and posts, that allows you to preview your profile as it would look to one of your Facebook friends. You are then able to select one of you friends and view it, literally, from their eyes.

The feature works so well, that if your friend happens to be live chatting at the time, you will see their conversations in action.

Steve O'Hear posted the video below, showcasing the problem.

 

Update: After a few hours Facebook sent us this statement.

“For a limited period of time, a bug permitted some users’ chat messages and pending friend requests to be made visible to their friends by manipulating the “preview my profile” feature of Facebook privacy settings. When we received reports of the problem, our engineers promptly diagnosed it and temporarily disabled the chat function. We also pushed out a fix to take care of the visible friend requests which is now complete. Chat will be turned back on across the site shortly. We worked quickly to resolve this matter, ensuring that once the bug was reported to us, a solution was quickly found and implemented.”

Source: Techcrunch

Comments

Popular posts from this blog

Windows Phone 7.5 Tango Officially Renamed As ‘Refresh’

The next version of Microsoft’s Windows Phone operating system after Mango 7.1 is officially renamed as ‘Windows Phone 7.5 Refresh’ – according to the head of Windows Phone division for Microsoft Italy.     According to Italian version of the post , 7.5 Refresh update will mostly be an update to the minimum specs of the devices it’ll be able to run (minimum RAM requirements is dropped from 512 MB to 256 MB). Other updates which may include in this release are better media messaging, location awareness icon, export and manage contacts to SIM card. The next major update after ‘Refresh’ is called Windows Phone Apollo (probably Windows Phone 8) could certainly be an exciting release from Microsoft. This Apollo update may have BitLocker kind of support on mobile devices, multi-core support. [ via ] [ Image ]

Your Google Apps Account is Changing

Google is about to make more of its services available to organizations with Google Apps accounts. This is an early adopter phase, and all domains may not get this option to move to the new infrastructure. What this means for you: In addition to the core suite of messaging and collaboration applications, Google Apps users may now access many more Google services with their Google Apps accounts.     Those who are eligible for this early adoption, Google Apps administrator will be presented with the above banner to start with the migration. In your organization, you can transition selected pilot users and admins, or you can start the transition now for all your users. The transition for pilot users can be reverted if necessary. After successful transition, your users will now be able to use other Google popular products like AdSense, AdWords, Alerts, Analytics, Android, Blogger, Finance, Google Desktop, News, Orkut, Reader, Voice, YouTube (Full list here ). Als...

How To Install Windows 8 on a Virtual Machine

Now that Microsoft released Windows 8 Developer Preview build officially this Tuesday, want to see and test all new features right from your machine without disturbing existing operating system? Read on.. Interesting part about Windows 8 is that Microsoft is foreseeing an OS that scales right from small form factors, tablets and all the way to big servers. Major updates in this new operating system include Tablet Optimization, Picture Password, New Start Screen with ‘Tile’ (apps), Metro UI, Charms, IE 10.     In order to test out Windows 8 Dev Preview in a virtual machine, I tried installing it in Microsoft’s Windows Virtual PC and as well as VMWare. Unfortunately, installation failed in both virtualization technologies with random blue screen errors. And here is the screenshot of all new re-imagined version of blue screen in Widows 8.   Even I tried installing on Oracle’s Virtual Box with default settings. It failed in that too. Finally, after tweaking so...