Security Failure at Facebook – What we Know

      Published on Friday, 5 October , 2018      17 Views      Comments Add Comment
Security Failure at Facebook – What we Know

  • Science & Technology

The security breach revealed on September 28 by Facebook affected tens of millions of accounts at the social network, which boasts more than 2.2 billion monthly users.

On Wednesday, the Irish data authority said it was opening up a formal investigation into whether the world’s biggest social network complied with tough new EU privacy regulations.



– What happened?

Hackers took advantage of a “complex interaction” between three software bugs, which required a degree of sophistication.

The vulnerability was created by a change to a video uploading feature in July of 2017.

It involved a flaw in a “See As” feature that showed Facebook what their profiles look like to other people at the social network.

Using the feature generated digital keys, called “access tokens,” which let users stay connected to their accounts without having to enter passwords anew.

Hackers were able to steal copies of the digital keys, giving them the same access and control of accounts as their legitimate owners.

On September 16, Facebook noticed a spike in activity that prompted it to investigate.

On September 25, Facebook engineers determined hackers had launched a sophisticated attack exploiting the vulnerability. A fix was in place two days later and stolen tokens rendered useless.

Facebook did not disclose when hackers first took advantage of the flaw, saying the investigation was early.

– What data was leaked?

Information hackers appeared interested in included names, genders, and home towns, but it was not clear for what purposes, the executives said in a telephone briefing.

Facebook said it was still trying to figure out what, if anything, hackers did in violated accounts. It did not seem at the outset that messages or posts were tampered with, and there was no access to banking or password information, according to the social network.

Given that digital keys opened Facebook doors wide to hackers, they would have had the ability to reach into third party applications linked to social network accounts.

They would have been able to get into linked accounts including Messenger or Instagram, both owned by Facebook, but not into the social network’s WhatsApp service.

An analysis of logs of third-party applications turned up no sign they were meddled with by the hackers, Facebook said on October 2.

– Who should worry?

Facebook said that “up to 50 million accounts” were directly affected, meaning hackers swiped digital keys.

According to the Data Protection Commission in Ireland, five million or fewer European users were among those affected.

An additional 40 million accounts that used the “View As” feature had tokens reset although it didn’t appear they were targeted by hackers.

– Measures taken by Facebook?

Facebook said it sealed the breach late on September 27 in California, where it has its headquarters, and alerted US law enforcement authorities as well as regulators in Ireland.

Facebook invalidated “access tokens” at issue in the breach, requiring people to log in anew with passwords. The social network informed those involved by posting messages atop news feeds.

– What is the risk to Facebook?

The risks for Facebook depend on how it complied with various laws and regulations, including the new General Data Protection Regulation in Europe.

Questions likely to be asked will include whether Facebook was fast enough notifying users of the breach and how well it protected accounts.

Protection of people’s data falls under the purview of the Federal Trade Commission in the United States, but states could also be interested in making sure local privacy or data protection laws were not violated.

In Europe, the Facebook breach and how it was handled would be examined through the lens of the GDPR, which strengthened protection for personal data.



Companies can now be fined a percentage of annual revenue if they break GDPR rules. Facebook appeared to have complied with a 72-hour deadline regarding publicly disclosing a hack, which could spare it a fine of more than a billion dollars.

Keywords:
Category Science & Technology | 2018/10/05 latest update at 11:30 AM
Source : Novinite | Photocredit : Google
18 Views
Comments Add comment



Related Articles

The editorial staff of Qatar Today would like to give all of its readers from Gulf and Qatar and the whole world the opportunity to participate actively in the development of the website! If you have something interesting, fun, scandalous - just something worth to be seen from more people. Capture it and share it in the Qatar Today with a short text.

Do you have information you want to reach our readers?

Send article/s

You can subscribe to our Facebook, Twitter and Google pages or use our RSS feed channel to always read the most important news about Qatar, the Gulf and the world.

Latest Comments


Qatar Emir Skips Gulf Meet Hosted By Saudi Arabia Doha News

Qatar Emir Skips Gulf Meet Hosted By Saudi Arabia

Qatar’s emir skipped a summit in Saudi Arabia on Sunday with fellow Arab Gulf leaders whose boycott of…

Qatar’s emir receives invite from Saudi king to attend Gulf Arab summit Emir

Qatar’s emir receives invite from Saudi king to attend Gulf Arab summit

Qatar’s emir, Sheikh Tamim bin Hamad Al Thani, has received a written invitation from Saudi Arabia’s King Salman…

Turkey’s Erdogan hails Qatar emir as ‘friend in times of trouble’ Emir

Turkey’s Erdogan hails Qatar emir as ‘friend in times of trouble’

Turkey’s president hailed close ally Qatar as a “friend in times of trouble” as he met with the…

Amir to take part in first Paris Peace Forum Emir

Amir to take part in first Paris Peace Forum

The Amir His Highness Sheikh Tamim bin Hamad al Thani will take part in the first Paris Peace…

GULF TV

Popular in GULF TV

About DFI

996 Views

Doha Film Institute is dedicated to film appreciation, education, and building a dynamic film industry in Qatar that…

Latest videos in GULF TV

21 Views

Color Run 2018

87 Views

What Is Qumra

Events

Qatar Events

Lifestyle

Life

Culture

Culture News

Sport

Sport

Science & Technology

Science & Technology

Government

Government News