|
|
|
Facebook Privacy Fail: Where is Your Friends Data Going? |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Présentation : Nice write ups on Facebook applications and the flow of data that occurs within and without them, including sending your session to be used by a third party. Here is an excerpt: "The third bit (red) is the amazing part-all of my session parameters were sent to the ad server as well. Because I authorised the application, these parameters are a capability to query Facebook for my data and my friends? data. Sure enough, the ad server then went on to query Facebook?s databases on my behalf! From its iframe, the ad-server?s JavaScript sends queries to Facebook with the application?s session parameters. The results are then sent back to the ad-server. You can watch all of this happen using a packet sniffer in real-time and it?s quite amazing. There?s a great writeup from a week ago by another security researcher investigating these matters with some example queries the ad server?s JavaScript is making, requesting thinks like the set of all friends who live in the same city, are single, and share interests with me. This is all in direct violation of Facebook?s Terms of Service and Platform Guidelines, which clearly prohibit using user data for anything but the application it was given for as well as transferring session parameters to a third party." Original article here. Another site referenced, Social Hacking[] Les mots clés de la revue de presse pour cet article : facebook privacy Les éléments de la revue Twitter pour les mots clé : facebook privacy Les derniers articles du site "Security for the Masses" :- LulzSec Next Op Sownage- LulzSec Laughing at your security since 2011 - Black History Canada Website Being Probed- 50 Cpanels Hacked. Is Your Website Here - Tor Developers Worked for Navy, NSA- DoD Memo on PKI- Ozeki.hu Hacked and Exposed - Latest Prices for EU CC - Stolen of Course - Hackers Want Help Hacking Your Web Site...- Latest from US-CERT
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
