Facebook is an online social networking service founded in February 2004 by Mark Zuckerberg.

learn more… | top users | synonyms

8
votes
2answers
222 views

What do I need to do when Facebook says: “Your computer needs to be cleaned”?

I am not sure if this is the correct community for this post. If not please refer me to the correct one. I am getting a "Your computer needs to be cleaned" error message when trying to login into ...
0
votes
2answers
189 views

Can you login to Facebook through a VPN or a proxy?

I've heard that there's a new type of security in Facebook. When logging in they automatically check if the IP Address is similar to that of the original IP during registration. That's in order to ...
0
votes
0answers
19 views

Changing timestamp on an Online account [closed]

Is there a way to implement a Facebook or Google account in the past? For instance manipulating the status update as being posted a year in the past or changing the time of account creation/ ...
1
vote
1answer
49 views

Facebook is not detecting TOR activities. is that a good or bad?

I use TOR to visit Facebook because I have to bypass some proxies. The point is, I can access without any problem, and my identity on Facebook changes according to the exit node. But when I visit ...
62
votes
3answers
9k views

Does correcting misspelled usernames create a security risk?

Does correcting a misspelled username and prompting the user with a valid username introduce a security risk? I recently tried logging into facebook and misspelled my email. They prompted me with ...
23
votes
2answers
4k views

Why I am getting Facebook login pop up for every site?

My Chrome browser keeps prompting me for Facebook authentication, even though I have never logged on to Facebook from my PC. I am using Chrome browser from my company where they have a strong proxy ...
0
votes
3answers
121 views

Does allowing Facebook cookies over TOR threaten my anonymity?

I was using Facebook on TOR without problem - I made no modifications to TOR, I just installed it and used it (except I had to do verification of identifying friends on login). I just switched to ...
1
vote
2answers
93 views

Why are Facebook, etc. considered as typical authorization servers in OpenId?

The OAuth2 specification says: The interaction between the authorization server and resource server is beyond the scope of this specification. The authorization server may be the same server ...
127
votes
7answers
18k views

Internet courtship: Why would a hacker buy me poker chips?

Believe me, I never expected to ever write a title like that on a Stack Exchange site either! Yesterday evening I got a call from my mother. She is quite tech savvy and generally knows her way around ...
-1
votes
2answers
111 views

Facebook Chat user's API [closed]

Yesterday my friend's facebook was hacked and on same fb account, the hacker wrote me via fb chat and asked my credit card information for somereason. I was noticed as well and try to waste his time ...
0
votes
2answers
92 views

Does preview link in facebook post reveal user?

I know that Facebook uses https which mean all information is encrypted. But when I view posts on FB, I often see preview of links, which include pictures and text. Since FB is on https, does it mean ...
0
votes
2answers
93 views

Are there any consequences of clicking on a URL to a facebook.com link?

So I stupidly clicked on a suspicious link on a Facebook post today. Guest account for shame. In my defense, it was a link to facebook.com itself, but it loaded a Facebook page, then seemed to ...
1
vote
2answers
755 views

Extracting Facebook ID or email from browser's history

While I was looking at my browser's history I noticed there has been a Facebook login from my computer, there are some Facebook related messaging and profile links in my browser history (chrome). The ...
0
votes
2answers
170 views

Can someone use IP spoofing to access your facebook profile as an administrator?

Do any IP addresses have security so they cannot be used by a hacker to access secure pages? For example, could a hacker spoof a Facebook IP address to enter someones profile page and make changes as ...
2
votes
0answers
28 views

OAuth2 client account & data storage [duplicate]

Context I have a REST API where a user can create an account from a web client. The password is saved as a salted hash in a database. When a user is authenticated they can save and retrieve private ...
5
votes
1answer
14k views

Is this Facebook email real or phishing?

I received this email from what is supposedly Facebook today. Here's a screenshot: I was not aware I had credits or credits existed on Facebook and apparently I have $2.30 worth. It looks legitimate ...
-2
votes
1answer
109 views

facebook malicious notification 12.12.2015 [duplicate]

Anyone know something more about this new malware if you can call it so? Just noticed it few minutes ago it makes chaos between facebook users, You get a notification about your friend replying to ...
1
vote
1answer
62 views

Are social media websites a security risk? If yes, how do we go about making them safer for users?

Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
1
vote
0answers
54 views

Facebook does not obay the Google Play's central opt out of the Ad ID [closed]

Moved to: http://law.stackexchange.com/questions/4962/facebook-does-not-obay-the-google-plays-central-opt-out-of-the-ad-id Facebook states in this Terms and services that it respects Google plays ...
3
votes
1answer
107 views

How long is the information on Facebook stored? [closed]

I was wondering how long Facebook stores our photos and posts? I hear two theories, one saying it is around half a year, after which all the data centers are going to erase our data. The other one ...
0
votes
0answers
33 views

Using Facebook to detect genuine referrals

I'm implementing a pre-registration system that provides incentives to users who invite friends to pre-register using a unique referral link. For each friend that pre-registers using a referral link, ...
3
votes
2answers
132 views

Is there a way to guarantee removal of data after closing Facebook / Gmail / Dropbox account? [closed]

Of course my default way of thinking is: deleted: true while keeping all the data in place. In fact I would be interested in knowing what standard operating procedures are in place for retention of ...
3
votes
1answer
157 views

Is there a known Facebook auto-posting bug?

A minister of Singapore (Vivian Balakrishnan) was found to be in breach of electioneering rules, when several posts were made on his Facebook account on "cooling-off day" (September 10th, 2015, the ...
0
votes
0answers
59 views

Are Android Facebook OAuth tokens vulnerable to theft?

If I have access to someone's unlocked Android phone, is it possible to get hold of their OAuth token for Facebook and use it on another device?
0
votes
2answers
178 views

Why is Facebook planning to drop support for SHA-1 encrypted sites, when they themselves use a SHA-1 certificate?

I noticed this problem when I implemented the Facebook Like Button plugin on my website, and got this error in my browser console: Hmm, I'm assuming that Firefox is talking about the last request, ...
2
votes
2answers
10k views

any information about en.quiente.info who has visited your account website

I ran across this site http://en.quiente.info, my friends tried it and they say it worked for them. It asks for most of the privileges on Facebook even sending messages on behalf of you. Any one has ...
0
votes
0answers
63 views

Facebook app permissions

According to an answer to this question : Bypass app permissions, I changed by curiosity the application permission of Facebook and Messenger for the camera to always ask. I'm using CyanogenMod 12.0. ...
2
votes
1answer
621 views

What's with the Facebook malware which posts obscene posts in all the groups? [closed]

How to get rid of the Facebook malware which sends pornographic posts in all the groups you belong to? I always made fun of people who became victim of this malware/virus saying they are not cautious ...
10
votes
3answers
309 views

Are bookmarklets safe with facebook data?

I usually play Mafia Wars and use bookmarklets like Spockholm, Arum, etc. Can these bookmarklets get my Facebook data when I run them, they usually ask to unframe the Facebook page? I was just ...
3
votes
1answer
560 views

How is Facebook accessing my iPhone texts in order to recommend friends?

I have noticed that Facebook has been recently recommending people who have texted me. It has been able to connect their number (I believe most of these people are using iPhone) and connect their ...
1
vote
0answers
133 views

How does the Facebook App on iPhone access the SMS data from iMessages? What are the details?

(This is not a repeat question to "How is Facebook accessing my iPhone texts in order to recommend friends?", linked below. I wish to know the internal details of how downloading the Facebook app on a ...
10
votes
1answer
211 views

Firefox trying to connect to other computers on the LAN

While running Wireshark trying to troubleshoot some other issues, I noticed several SYN connections to ports 80 and 443 on the workstation I was using. The packets were dropped. These were coming from ...
-2
votes
1answer
341 views

Facebook and people you may know suggestions [duplicate]

I know all the conspiracy theories about if how you search for someone on it they can find out etc but I have a question. We all know Facebook likes to keep its mining secret. Both mine and my ...
5
votes
3answers
8k views

How can Facebook possibly stop a bruteforce attack on an account?

I've been doing some research on hacking recently and I found some very interesting tutorials on brute force cracking. I have some questions to ask and I'll be using Facebook as an example. Let's say ...
4
votes
2answers
104 views

If the user registers for my site via e.g. Facebook login, should I force the user to also create a password on my site?

Most sites, when you register via e.g. Facebook, redirect you to a page afterwards asking you to enter additional information that the site needs. Very often this includes setting a password for the ...
1
vote
0answers
66 views

authentication model using oAuth

I am planning to use facebook authentication for my website window.fbAsyncInit = function() { FB.init({ appId: 'APPID', cookie : true, xfbml : true, version : ...
1
vote
0answers
50 views

Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]

Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure? I have noticed that Facebook, Google, Amazon the ...
0
votes
1answer
10k views

Unsolicited SMS from Facebook [closed]

I got the following SMS from number 32665 (FBOOK): "Confirmed! To edit SMS preferences go to m.facebook.com/settings. To turn off all SMS messages reply stop. Reply help for other option. SMS ...
26
votes
1answer
3k views

Facebook password lowercase and uppercase

Recently I logged into my Facebook account and then noticed that my caps lock was on. So I tried to log in again with and without capslock on. I got in both times. Then I tried to log in with the ...
2
votes
1answer
409 views

Facebook hacker [closed]

My Facebook account was hacked. Searching through security and settings info, Facebook showed that someone was logged into my account from another state and showed some kind of id number. The number ...
-4
votes
1answer
309 views

Facebook friend suggestions [closed]

An ex of mine has joined Facebook yesterday and I have been informed of this and asked to make friend suggestions for him. I have had no contact with him for over 5 years and have deleted his home ...
0
votes
0answers
291 views

Is facebook to facebook (mobile application call ) encrypted?

I understand facebook uses WebRtc to send voice data packet in network if any one end client is on the browser. Use of DTLS packets can be seen in captured (wireshark) file. But in case of mobile app ...
8
votes
3answers
4k views

Why did Facebook not use HSTS for a long time after it became available?

(Note that Facebook now does use HSTS. The question was asked at a time when they didn't.) To force a browser to always go directly to HTTPS for a website (and not rely on 302 redirects from the HTTP ...
17
votes
2answers
11k views

Facebook API : App Secret - possible misuse

I've recently find out that by simple quick look into compiled code of one of our applications, you can get both App ID (API Key) and App Secret for Facebook API I suppose that we should really keep ...
2
votes
1answer
161 views

How harmful is it to expose access token to the resource owner?

While checking the facebook php sdk implementation I noticed that they expose the access token to the resource owner (user) $params = array( 'next' => $next, 'access_token' => ...
0
votes
0answers
116 views

Social game authentication exploit

We're running a popular social game and we have a security problem that is growing more and more popular these days. We have the following product requirements: There should be no registration to ...
0
votes
2answers
260 views

How do google or facebook know I'm behind a man in the middle proxy?

Whenever I'm behind a man in the middle proxy such as burp, and try to access either google or facebook, I get an alert message telling me that the connection is not reliable and blocks the page from ...
5
votes
2answers
4k views

Facebook POST request capture

I have been trying to test a sniff on facebook POST request forms using wireshark (filtered HTTP). At login form, I would try login, and then check wireshark and see that no packet was captured. ...
1
vote
3answers
128 views

External JS Security

I'm kinda new to security development. I've work mostly with backend processing stuff. I've been assign on how to secure external javascript that we import from facebook, twitter and google. One ...
34
votes
3answers
21k views

Should we store accesstoken in our database for oauth2?

I have a requirement to implement Facebook and Google login in my web application. I also need to access a user's Facebook/Google+ friend list. I have gone through the complete OAuth2 documentation of ...