September 6, 2010 at 09:16Spammer found serious vulnerability on Facebook
The other day it became known that a resourceful spammer, whose name could not be determined, found a serious vulnerability on Facebook that allowed him to upload thousands of images to third-party user accounts that had nothing to do with this spammer. The social network has already confirmed that the vulnerability really existed, and this is a rather serious vulnerability - however, Facebook has already covered this hole.
So, it all started with the fact that unsuspecting users of this social network found a lot of spam pictures on their “walls”, with links to “free iPhones”. It is worth noting that it was Apple’s free smartphones that became the spamming trend of Facebook this week. It is worth noting that changing the password by users of the social network did not help block access to their account for this spammer.
Here's what Facebook tells us about this: “Earlier this week, we discovered a bug in the code that concerns the process of uploading photos. We began to work actively on fixing the error, and soon resolved the problem. However, before the vulnerability was closed, there was a man who was able to take advantage of the “hole”, which allowed him to upload his pictures to any user accounts.
Pictures, as mentioned above, contained links to sites where allegedly it was possible to get free equipment. But users who filled out forms to receive free iPhones, instead of the expected smartphones, received only a flurry of spam calls to their numbers.
Facebook claims the spammer was able to upload images to thousands of user accounts before the company's programmers could fix the problem. After that, the developers deleted the messages left by the spammer. According to all the same representatives of Facebook, not a single account was stolen in the process of “hacking” the social network.
»An incident involving spamming occurred on Facebook over the course of several hours on Saturday. During this time, a huge number of spam pictures were posted on a variety of accounts. We have already removed all this spam from the “walls” and fixed a mistake that allowed the spammer to do all this. We apologize for the photo, but we can assure you that all accounts were safe and sound, not one was stolen as a result of the incident, "the technical support service of the social network said.
Source .
So, it all started with the fact that unsuspecting users of this social network found a lot of spam pictures on their “walls”, with links to “free iPhones”. It is worth noting that it was Apple’s free smartphones that became the spamming trend of Facebook this week. It is worth noting that changing the password by users of the social network did not help block access to their account for this spammer.
Here's what Facebook tells us about this: “Earlier this week, we discovered a bug in the code that concerns the process of uploading photos. We began to work actively on fixing the error, and soon resolved the problem. However, before the vulnerability was closed, there was a man who was able to take advantage of the “hole”, which allowed him to upload his pictures to any user accounts.
Pictures, as mentioned above, contained links to sites where allegedly it was possible to get free equipment. But users who filled out forms to receive free iPhones, instead of the expected smartphones, received only a flurry of spam calls to their numbers.
Facebook claims the spammer was able to upload images to thousands of user accounts before the company's programmers could fix the problem. After that, the developers deleted the messages left by the spammer. According to all the same representatives of Facebook, not a single account was stolen in the process of “hacking” the social network.
»An incident involving spamming occurred on Facebook over the course of several hours on Saturday. During this time, a huge number of spam pictures were posted on a variety of accounts. We have already removed all this spam from the “walls” and fixed a mistake that allowed the spammer to do all this. We apologize for the photo, but we can assure you that all accounts were safe and sound, not one was stolen as a result of the incident, "the technical support service of the social network said.
Source .