The Bug Exposed Facebook Users And Their Friends’ Interests Was Fixed Shortly After
Author - Nov 15, 2018
Malicious websites exploited a bug on the Facebook website to see users’ likes and interests while they had no idea.
- Instagram Launches A Lite Version For Users In Rural And Remote Areas
- Australia Passed New Law That Requires Facebook And Google To Pay For News Content
- Facebook Stops Showing Australian Content, Even From Government Sites
Facebook has seemingly had a year full of difficulties when facing the scandals including security breaches and hacks. A security researcher recently revealed another bad luck for the company.
As per this revelation, malicious websites exploited a bug on the website Facebook.com to see users’ likes and interests while they had no idea.
Ron Masas, a security researcher of Imperva detected the bug in May 2018. He reportedly uncovered that search results on Facebook were the key reason for the attacks of Cross-Site Request Forgery (CSRF for short).
CSRF, also known as Sea Surfing, is a type of attack that the web browser is cheated to run a task inside an application logged in by users. As a consequence, the attack will affect both end users and businesses.
In the case of Facebook, user’s data was siphoned on another browser tab and then, an IFrame could be embedded by a website to make use of their data while they were unaware.
He further explained that the IFrame HTML document was used to “allow information to cross over domains”. In other words, hackers could use Facebook to gather all the information relating to users and their friends when they accessed to a suspicious website.
Moreover, the website approached the search queries on Facebook in a new tab and hence, when users liked a page, hackers would get the information. The same thing also happened when hackers used certain keywords to search any post given by the users which only their Facebook friends can see.
Even when users set the privacy settings to hide their own interests to everyone, but their friends, it doesn’t work with the bug. Advertisement companies may be the beneficiary in this scenario.
The good news is that the company rapidly fixed this bug as soon as it came to light a few days later.
The Facebook spokesperson claimed that the company sent a warning to browsers makers as well as web standards groups to prevent this bug from attacking other web applications.
Featured Stories
![PDF Prodigy: Expert Techniques for Editing](https://img.mobygeek.com/crop/320x180/photo_galleries/2024/01/18/pdf-6fd5.png)
ICT News - Jan 18, 2024
PDF Prodigy: Expert Techniques for Editing
![The Psychology of Casino Game Design](https://img.mobygeek.com/crop/227x128/2023/08/03/casino-india-89d9.jpg)
ICT News - Aug 03, 2023
The Psychology of Casino Game Design
![3 Reasons your privacy gets compromised online](https://img.mobygeek.com/crop/227x128/2022/05/17/hacker-9565.jpg)
ICT News - May 17, 2022
3 Reasons your privacy gets compromised online
![Apple Devices For Sale](https://img.mobygeek.com/crop/227x128/2022/05/11/96174530-5607-11ec-9bbc-ba5fcc880a33-cf-4827.jpg)
ICT News - May 11, 2022
Apple Devices For Sale
![Pin-Up Review India 2022](https://img.mobygeek.com/crop/227x128/2022/04/12/pexels-andrea-piacquadio-3768128-05c6.jpg)
ICT News - Apr 12, 2022
Pin-Up Review India 2022
![Choosing between a shared and a dedicated server for gaming](https://img.mobygeek.com/crop/227x128/2022/03/29/pexels-field-engineer-442150-df92.jpg)
ICT News - Mar 29, 2022
Choosing between a shared and a dedicated server for gaming
![How The Internet Came Into Being](https://img.mobygeek.com/crop/227x128/2022/03/18/pexels-andrea-piacquadio-914931-4083.jpg)
ICT News - Mar 18, 2022
How The Internet Came Into Being
![The Best Gaming Tech of 2022](https://img.mobygeek.com/crop/227x128/2022/03/17/florian-olivo-mf23rf8xary-unsplash-7b61.jpg)
ICT News - Mar 17, 2022
The Best Gaming Tech of 2022
![Technologies that enable the development of online casinos with live dealers](https://img.mobygeek.com/crop/227x128/2022/02/16/istockphoto-1200707009-612x612-f9fa.jpg)
ICT News - Feb 16, 2022
Technologies that enable the development of online casinos with live dealers
![Remember These Safety Measures While Playing at an Online Casino](https://img.mobygeek.com/crop/227x128/2022/02/08/pexels-photo-3279685-8114.jpeg)
ICT News - Feb 08, 2022
Comments
Sort by Newest | Popular