Facebook is an online social networking service founded in February 2004 by Mark Zuckerberg.

learn more… | top users | synonyms

0
votes
2answers
62 views

Are there any consequences of clicking on a URL to a facebook.com link?

So I stupidly clicked on a suspicious link on a Facebook post today. Guest account for shame. In my defense, it was a link to facebook.com itself, but it loaded a Facebook page, then seemed to ...
0
votes
2answers
102 views

Can someone use IP spoofing to access your facebook profile as an administrator?

Do any IP addresses have security so they cannot be used by a hacker to access secure pages? For example, could a hacker spoof a Facebook IP address to enter someones profile page and make changes as ...
2
votes
0answers
26 views

OAuth2 client account & data storage [duplicate]

Context I have a REST API where a user can create an account from a web client. The password is saved as a salted hash in a database. When a user is authenticated they can save and retrieve private ...
1
vote
2answers
65 views

Why are Facebook, etc. considered as typical authorization servers in OpenId?

The OAuth2 specification says: The interaction between the authorization server and resource server is beyond the scope of this specification. The authorization server may be the same server ...
-2
votes
1answer
79 views

facebook malicious notification 12.12.2015 [duplicate]

Anyone know something more about this new malware if you can call it so? Just noticed it few minutes ago it makes chaos between facebook users, You get a notification about your friend replying to ...
0
votes
2answers
58 views

Does preview link in facebook post reveal user?

I know that Facebook uses https which mean all information is encrypted. But when I view posts on FB, I often see preview of links, which include pictures and text. Since FB is on https, does it mean ...
1
vote
1answer
53 views

Are social media websites a security risk? If yes, how do we go about making them safer for users?

Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
3
votes
1answer
69 views

How long is the information on Facebook stored? [closed]

I was wondering how long Facebook stores our photos and posts? I hear two theories, one saying it is around half a year, after which all the data centers are going to erase our data. The other one ...
1
vote
0answers
42 views

Facebook does not obay the Google Play's central opt out of the Ad ID [closed]

Moved to: http://law.stackexchange.com/questions/4962/facebook-does-not-obay-the-google-plays-central-opt-out-of-the-ad-id Facebook states in this Terms and services that it respects Google plays ...
0
votes
0answers
24 views

Using Facebook to detect genuine referrals

I'm implementing a pre-registration system that provides incentives to users who invite friends to pre-register using a unique referral link. For each friend that pre-registers using a referral link, ...
3
votes
2answers
108 views

Is there a way to guarantee removal of data after closing Facebook / Gmail / Dropbox account? [closed]

Of course my default way of thinking is: deleted: true while keeping all the data in place. In fact I would be interested in knowing what standard operating procedures are in place for retention of ...
3
votes
1answer
128 views

Is there a known Facebook auto-posting bug?

A minister of Singapore (Vivian Balakrishnan) was found to be in breach of electioneering rules, when several posts were made on his Facebook account on "cooling-off day" (September 10th, 2015, the ...
0
votes
0answers
48 views

Are Android Facebook OAuth tokens vulnerable to theft?

If I have access to someone's unlocked Android phone, is it possible to get hold of their OAuth token for Facebook and use it on another device?
0
votes
2answers
155 views

Why is Facebook planning to drop support for SHA-1 encrypted sites, when they themselves use a SHA-1 certificate?

I noticed this problem when I implemented the Facebook Like Button plugin on my website, and got this error in my browser console: Hmm, I'm assuming that Firefox is talking about the last request, ...
0
votes
0answers
56 views

Facebook app permissions

According to an answer to this question : Bypass app permissions, I changed by curiosity the application permission of Facebook and Messenger for the camera to always ask. I'm using CyanogenMod 12.0. ...
2
votes
1answer
528 views

What's with the Facebook malware which posts obscene posts in all the groups? [closed]

How to get rid of the Facebook malware which sends pornographic posts in all the groups you belong to? I always made fun of people who became victim of this malware/virus saying they are not cautious ...
1
vote
0answers
78 views

How does the Facebook App on iPhone access the SMS data from iMessages? What are the details?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", linked below. I wish to know the internal details of how downloading the Facebook app on a ...
3
votes
1answer
279 views

How is Facebook accessing my iPhone texts in order to recommend friends?

I have noticed that Facebook has been recently recommending people who have texted me. It has been able to connect their number (I believe most of these people are using iPhone) and connect their ...
-2
votes
1answer
264 views

Facebook and people you may know suggestions [duplicate]

I know all the conspiracy theories about if how you search for someone on it they can find out etc but I have a question. We all know Facebook likes to keep its mining secret. Both mine and my ...
10
votes
1answer
179 views

Firefox trying to connect to other computers on the LAN

While running Wireshark trying to troubleshoot some other issues, I noticed several SYN connections to ports 80 and 443 on the workstation I was using. The packets were dropped. These were coming from ...
1
vote
0answers
64 views

authentication model using oAuth

I am planning to use facebook authentication for my website window.fbAsyncInit = function() { FB.init({ appId: 'APPID', cookie : true, xfbml : true, version : ...
4
votes
2answers
90 views

If the user registers for my site via e.g. Facebook login, should I force the user to also create a password on my site?

Most sites, when you register via e.g. Facebook, redirect you to a page afterwards asking you to enter additional information that the site needs. Very often this includes setting a password for the ...
1
vote
0answers
43 views

Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]

Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure? I have noticed that Facebook, Google, Amazon the ...
0
votes
1answer
5k views

Unsolicited SMS from Facebook [closed]

I got the following SMS from number 32665 (FBOOK): "Confirmed! To edit SMS preferences go to m.facebook.com/settings. To turn off all SMS messages reply stop. Reply help for other option. SMS ...
2
votes
1answer
288 views

Facebook hacker [closed]

My Facebook account was hacked. Searching through security and settings info, Facebook showed that someone was logged into my account from another state and showed some kind of id number. The number ...
-4
votes
1answer
272 views

Facebook friend suggestions [closed]

An ex of mine has joined Facebook yesterday and I have been informed of this and asked to make friend suggestions for him. I have had no contact with him for over 5 years and have deleted his home ...
0
votes
0answers
214 views

Is facebook to facebook (mobile application call ) encrypted?

I understand facebook uses WebRtc to send voice data packet in network if any one end client is on the browser. Use of DTLS packets can be seen in captured (wireshark) file. But in case of mobile app ...
2
votes
1answer
134 views

How harmful is it to expose access token to the resource owner?

While checking the facebook php sdk implementation I noticed that they expose the access token to the resource owner (user) $params = array( 'next' => $next, 'access_token' => ...
0
votes
0answers
108 views

Social game authentication exploit

We're running a popular social game and we have a security problem that is growing more and more popular these days. We have the following product requirements: There should be no registration to ...
0
votes
2answers
224 views

How do google or facebook know I'm behind a man in the middle proxy?

Whenever I'm behind a man in the middle proxy such as burp, and try to access either google or facebook, I get an alert message telling me that the connection is not reliable and blocks the page from ...
5
votes
2answers
3k views

Facebook POST request capture

I have been trying to test a sniff on facebook POST request forms using wireshark (filtered HTTP). At login form, I would try login, and then check wireshark and see that no packet was captured. ...
1
vote
3answers
104 views

External JS Security

I'm kinda new to security development. I've work mostly with backend processing stuff. I've been assign on how to secure external javascript that we import from facebook, twitter and google. One ...
2
votes
1answer
87 views

Why do Facebook and Microsoft make you enter a code when reseting a password?

Typically when you reset a website password you receive an email. A lot of sites send you a link with a code on the end of it to click on which will take you to an 'enter new password' form. ...
1
vote
0answers
167 views

How is Facebook Spam/Hacks Achieved? [closed]

Recently a handful of my Facebook friends flew off the handle screaming about how horribly they had been "hacked" and how scary it was and etc. It was my view that most of these "hacks" were simply ...
2
votes
1answer
112 views

Can all of Facebook's data be wiped out? [closed]

Is there a possibility that Facebook's entire data could ever be wiped out by a team of malicious individuals or even a government? Remotely or physically. If so, how do you think they would go about ...
0
votes
1answer
171 views

I just found many facebook entries on my registry? [closed]

I don't have a Facebook account but I was messing with my registry deleting old stuff and I found a bunch of Facebook keys and folders. Facebook is notorious for being a tool for spy agencies and has ...
1
vote
1answer
201 views

Which things can facebook access like contacts etc

I had two incidents . I added john to my skype account and i exchaged few messages. Then i went home and was checking facebook . Then at right side i saw Do you know john and it was his acoount ...
5
votes
3answers
7k views

How can Facebook possibly stop a bruteforce attack on an account?

I've been doing some research on hacking recently and I found some very interesting tutorials on brute force cracking. I have some questions to ask and I'll be using Facebook as an example. Let's say ...
1
vote
1answer
229 views

This facebook page looks different - phishing attempt?

After logging on to a public wifi, I was redirected to this page appearing to be from facebook, and being done via https: which looks markedly different from my normal facebook page I understand ...
3
votes
2answers
9k views

any information about en.quiente.info who has visited your account website

I ran across this site http://en.quiente.info, my friends tried it and they say it worked for them. It asks for most of the privileges on Facebook even sending messages on behalf of you. Any one has ...
12
votes
3answers
347 views

Is there any difference between visiting Facebook via their Tor address, and visiting them via their normal address over Tor?

From a security perspective, is visiting via the .onion address more/less secure? I'm using Facebook as an example, but this question is really about any website which has both a 'normal' and a Tor ...
-1
votes
2answers
130 views

How can I tell if a website is sharing what videos I'm watching without my consent?

It seems that publishers are getting sued or threatened for possibly sharing video watching information - information that an individual has watched a video, before this individual has explicitly ...
-1
votes
1answer
80 views

Hacked email or total accident [closed]

I have a Facebook account which I look at occasionaly and access via the Facebook app. However whilst reading my emails I tried to access it from n email had they had sent me. I clicked the link which ...
3
votes
1answer
394 views

REST API stateless authentication using social login

I am implementing a REST API for our mobile applications in which user will login using the SDKs of various social media. Currently, the login strategy is as follows: The token(s) (access_token in ...
1
vote
2answers
73 views

Is it normal if user gets logged in Facebook or Twitter after they use Like or Tweet button? [closed]

Personally I don't use social networks, so I'm not sure about their behaviour. Currently I must code website which heavily depends on "Likes" and "Tweets" about articles. Each article has Like and ...
2
votes
1answer
2k views

Are photos on Facebook servers stored with the geotagging metadata in their EXIF headers?

If i download photo from Facebook, will i be able to read its geotagging metadata, or Facebook just parse the uploaded photo, record all EXIF headers into the database (to show the camera model ...
1
vote
0answers
233 views

Facebook Login and OpenID Connect [closed]

Can someone confirm whether Facebook Login API (https://developers.facebook.com/docs/facebook-login/v2.2) is based on OpenID Connect (http://openid.net/connect/) specification? Thanks, Sameer
1
vote
1answer
225 views

How to suspend a silent oberserver from Facebook account?

A friend of mine told me about the following problem: She used to login on Facebook on a computer of her boyfriend. After they broke up she recognized that he was able to login to her account from his ...
1
vote
0answers
225 views

Password automatically typed into user box on facebook [closed]

Just want to ask some questions regarding on this strange experience while logging on my account on Facebook There are cases that I'm accidentally typing my password into the username box of the ...
2
votes
1answer
128 views

While logged in to Google etc., can a malicious site discover my ID?

If I visited a malicious site while being logged in to Google, Hotmail, Facebook, or Twitter in the same browser window, how hard is it for the site to discover my account IDs without my explicit ...