Facebook is an online social networking service founded in February 2004 by Mark Zuckerberg.

learn more… | top users | synonyms

0
votes
1answer
35 views

How To Stop A Mobile Verification Attack

I am thinking of using mobile phone number verification for the sign up step in my web application but how do I prevent a hacker or a malicious user from sending mobile verification requests to an ...
0
votes
0answers
39 views

How do I decrypt Facebook's Messenger SSL traffic on Android?

I would like to investigate the Messenger chat protocol, and to do so i need to see it in clear... I've been able to successfully sniff the (not encrypted) traffic with the 'Shark for Root' but it ...
0
votes
0answers
66 views

Generally speaking, how does the Facebook JavaScript SDK provide authentication?

I'm looking for a high level overview of how the Facebook JavaScript SDK authenticates users, and the techniques involved. All JavaScript apps use this standard code to import the Facebook Single ...
0
votes
1answer
70 views

Why CDNs don't require authentication to access static files?

Why companies like Facebook do not require authenticated HTTP/HTTPS requests to access content (like images) using CDNs? In a way, once one "friend" can access the image URL, he/she can effectively ...
0
votes
0answers
71 views

A JSE file was downloaded after clicking a notification on my Facebook account [duplicate]

I got a notification on Facebook that says "Finn mentioned you in a comment". After clicking the notification a file was downloaded on my phone. I found it unusual because when you click a ...
90
votes
4answers
36k views

I was tricked on Facebook into downloading an obfuscated script

I got a notification on Facebook: "(a friend of mine) mentioned you in a comment". However, when I clicked it, Firefox tried to download the following file: comment_24016875.jse This is an ...
1
vote
1answer
222 views

Why does Mark Zuckerberg cover his headphone jack with tape?

I can understand covering the camera or microphone but why the audio jack? Mark Zuckerberg have shared a photo to his Facebook account and celebrating the growing user base of Instagram which is ...
-5
votes
1answer
53 views

Lost my facebook account and all related pictures [closed]

I had to change my account. I must have been hacked. I received a message to go to facebook.com. also settings to turn off all sms. I don't know what to do and facebook gave me a new account. I lost ...
4
votes
1answer
79 views

Why are some people more common targets for Facebook profile impersonation than others?

Earlier tonight I got a Facebook friend request from a profile that appeared to be a duplicate of my grandmother's Facebook profile, with her name and profile picture, but it was noticeably devoid of ...
3
votes
2answers
129 views

Is it secure: unsecured Wi-Fi + social network authentication to access the web?

Recently I visited my dental office and noticed a Wi-Fi configuration I haven't seen before. First, there is unsecured (no password) Wi-Fi, but I cannot surf the web yet. I am redirected to a webpage ...
-2
votes
2answers
92 views

Trace person from an old Facebook chat? [closed]

I spoke with someone in January in the Facebook chat. The very next day he deleted his account. The only thing I have is my copy of the conversation stored in my account. Is there a way to trace his ...
1
vote
3answers
140 views

Can my employer see the actual video chat if I use Facebook messenger on work WiFi?

I used my personal iPad over work WiFi (Verizon jetpack) to have a video chat with a friend over Facebook messenger. Can my employer actually see the video or just that I used messenger?
0
votes
0answers
65 views

Pop up in Facebook built-in browser

While I was visiting a page on a usual website with the built-in browser of the Android Facebook app, a pop-up just... poped-up, saying dumb stuff about my cellphone being full of viruses, etc. (Quite ...
8
votes
2answers
413 views

What do I need to do when Facebook says: “Your computer needs to be cleaned”?

I am not sure if this is the correct community for this post. If not please refer me to the correct one. I am getting a "Your computer needs to be cleaned" error message when trying to login into ...
-1
votes
1answer
98 views

Facebook is not detecting Tor activities. Is that a good or bad?

I use Tor to visit Facebook because I have to bypass some proxies. The point is, I can access it without any problem, and my identity on Facebook changes according to the exit node. But when I ...
62
votes
3answers
9k views

Does correcting misspelled usernames create a security risk?

Does correcting a misspelled username and prompting the user with a valid username introduce a security risk? I recently tried logging into facebook and misspelled my email. They prompted me with ...
24
votes
2answers
4k views

Why I am getting Facebook login pop up for every site?

My Chrome browser keeps prompting me for Facebook authentication, even though I have never logged on to Facebook from my PC. I am using Chrome browser from my company where they have a strong proxy ...
0
votes
2answers
431 views

Can you login to Facebook through a VPN or a proxy?

I've heard that there's a new type of security in Facebook. When logging in they automatically check if the IP Address is similar to that of the original IP during registration. That's in order to ...
130
votes
7answers
18k views

Internet courtship: Why would a hacker buy me poker chips?

Believe me, I never expected to ever write a title like that on a Stack Exchange site either! Yesterday evening I got a call from my mother. She is quite tech savvy and generally knows her way around ...
-1
votes
2answers
123 views

Facebook Chat user's API [closed]

Yesterday my friend's facebook was hacked and on same fb account, the hacker wrote me via fb chat and asked my credit card information for somereason. I was noticed as well and try to waste his time ...
0
votes
3answers
151 views

Does allowing Facebook cookies over TOR threaten my anonymity?

I was using Facebook on TOR without problem - I made no modifications to TOR, I just installed it and used it (except I had to do verification of identifying friends on login). I just switched to ...
0
votes
2answers
99 views

Are there any consequences of clicking on a URL to a facebook.com link?

So I stupidly clicked on a suspicious link on a Facebook post today. Guest account for shame. In my defense, it was a link to facebook.com itself, but it loaded a Facebook page, then seemed to ...
0
votes
2answers
210 views

Can someone use IP spoofing to access your facebook profile as an administrator?

Do any IP addresses have security so they cannot be used by a hacker to access secure pages? For example, could a hacker spoof a Facebook IP address to enter someones profile page and make changes as ...
2
votes
0answers
32 views

OAuth2 client account & data storage [duplicate]

Context I have a REST API where a user can create an account from a web client. The password is saved as a salted hash in a database. When a user is authenticated they can save and retrieve private ...
1
vote
2answers
103 views

Why are Facebook, etc. considered as typical authorization servers in OpenId?

The OAuth2 specification says: The interaction between the authorization server and resource server is beyond the scope of this specification. The authorization server may be the same server ...
-2
votes
1answer
141 views

facebook malicious notification 12.12.2015 [duplicate]

Anyone know something more about this new malware if you can call it so? Just noticed it few minutes ago it makes chaos between facebook users, You get a notification about your friend replying to ...
0
votes
2answers
94 views

Does preview link in facebook post reveal user?

I know that Facebook uses https which mean all information is encrypted. But when I view posts on FB, I often see preview of links, which include pictures and text. Since FB is on https, does it mean ...
1
vote
1answer
63 views

Are social media websites a security risk? If yes, how do we go about making them safer for users?

Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
3
votes
1answer
155 views

How long is the information on Facebook stored? [closed]

I was wondering how long Facebook stores our photos and posts? I hear two theories, one saying it is around half a year, after which all the data centers are going to erase our data. The other one ...
1
vote
0answers
64 views

Facebook does not obay the Google Play's central opt out of the Ad ID [closed]

Moved to: http://law.stackexchange.com/questions/4962/facebook-does-not-obay-the-google-plays-central-opt-out-of-the-ad-id Facebook states in this Terms and services that it respects Google plays ...
0
votes
0answers
34 views

Using Facebook to detect genuine referrals

I'm implementing a pre-registration system that provides incentives to users who invite friends to pre-register using a unique referral link. For each friend that pre-registers using a referral link, ...
3
votes
2answers
136 views

Is there a way to guarantee removal of data after closing Facebook / Gmail / Dropbox account? [closed]

Of course my default way of thinking is: deleted: true while keeping all the data in place. In fact I would be interested in knowing what standard operating procedures are in place for retention of ...
3
votes
1answer
172 views

Is there a known Facebook auto-posting bug?

A minister of Singapore (Vivian Balakrishnan) was found to be in breach of electioneering rules, when several posts were made on his Facebook account on "cooling-off day" (September 10th, 2015, the ...
0
votes
0answers
67 views

Are Android Facebook OAuth tokens vulnerable to theft?

If I have access to someone's unlocked Android phone, is it possible to get hold of their OAuth token for Facebook and use it on another device?
0
votes
2answers
202 views

Why is Facebook planning to drop support for SHA-1 encrypted sites, when they themselves use a SHA-1 certificate?

I noticed this problem when I implemented the Facebook Like Button plugin on my website, and got this error in my browser console: Hmm, I'm assuming that Firefox is talking about the last request, ...
0
votes
0answers
64 views

Facebook app permissions

According to an answer to this question : Bypass app permissions, I changed by curiosity the application permission of Facebook and Messenger for the camera to always ask. I'm using CyanogenMod 12.0. ...
2
votes
1answer
661 views

What's with the Facebook malware which posts obscene posts in all the groups? [closed]

How to get rid of the Facebook malware which sends pornographic posts in all the groups you belong to? I always made fun of people who became victim of this malware/virus saying they are not cautious ...
1
vote
0answers
208 views

How does the Facebook App on iPhone access the SMS data from iMessages? What are the details?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", linked below. I wish to know the internal details of how downloading the Facebook app on a ...
3
votes
1answer
1k views

How is Facebook accessing my iPhone texts in order to recommend friends?

I have noticed that Facebook has been recently recommending people who have texted me. It has been able to connect their number (I believe most of these people are using iPhone) and connect their ...
-2
votes
1answer
386 views

Facebook and people you may know suggestions [duplicate]

I know all the conspiracy theories about if how you search for someone on it they can find out etc but I have a question. We all know Facebook likes to keep its mining secret. Both mine and my ...
10
votes
1answer
220 views

Firefox trying to connect to other computers on the LAN

While running Wireshark trying to troubleshoot some other issues, I noticed several SYN connections to ports 80 and 443 on the workstation I was using. The packets were dropped. These were coming from ...
1
vote
0answers
67 views

authentication model using oAuth

I am planning to use facebook authentication for my website window.fbAsyncInit = function() { FB.init({ appId: 'APPID', cookie : true, xfbml : true, version : 'v2....
4
votes
2answers
109 views

If the user registers for my site via e.g. Facebook login, should I force the user to also create a password on my site?

Most sites, when you register via e.g. Facebook, redirect you to a page afterwards asking you to enter additional information that the site needs. Very often this includes setting a password for the ...
1
vote
0answers
51 views

Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]

Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure? I have noticed that Facebook, Google, Amazon the ...
0
votes
1answer
12k views

Unsolicited SMS from Facebook [closed]

I got the following SMS from number 32665 (FBOOK): "Confirmed! To edit SMS preferences go to m.facebook.com/settings. To turn off all SMS messages reply stop. Reply help for other option. SMS ...
2
votes
1answer
457 views

Facebook hacker [closed]

My Facebook account was hacked. Searching through security and settings info, Facebook showed that someone was logged into my account from another state and showed some kind of id number. The number ...
-4
votes
1answer
330 views

Facebook friend suggestions [closed]

An ex of mine has joined Facebook yesterday and I have been informed of this and asked to make friend suggestions for him. I have had no contact with him for over 5 years and have deleted his home ...
0
votes
0answers
308 views

Is facebook to facebook (mobile application call ) encrypted?

I understand facebook uses WebRtc to send voice data packet in network if any one end client is on the browser. Use of DTLS packets can be seen in captured (wireshark) file. But in case of mobile app ...
2
votes
1answer
180 views

How harmful is it to expose access token to the resource owner?

While checking the facebook php sdk implementation I noticed that they expose the access token to the resource owner (user) $params = array( 'next' => $next, 'access_token' => $session->...
0
votes
0answers
136 views

Social game authentication exploit

We're running a popular social game and we have a security problem that is growing more and more popular these days. We have the following product requirements: There should be no registration to ...