« WASC Beerfest 2008 @ RSA April 9th | Main | Microsoft admits it knew about, didn't patch, bugs »

Paris Hilton pwned via facebook flaw

"A security lapse on Facebook has allowed its users to gain access to vast libraries of private photographs, including one of Paris Hilton drinking beer with her friends.

A Canadian hacker exploited a recent upgrade to the networking site's privacy settings to view pictures that were intended to be private, including some of Paris Hilton partying with her brother, Barron Nicholas, at the recent Emmy awards.

Facebook was told about the problem yesterday afternoon, and said it had since fixed the bug.

Byron Ng, a computer technician from Vancouver, began looking for flaws in the site's security after an upgrade last week purportedly gave Facebook's 40 million users greater control over the way they shared material such as photographs with their friends.

Mr Ng found that he was able to pull up recent pictures posted by Facebook users, even if the owners intended them only to be seen by a select group of friends. "

Article Link: http://technology.timesonline.co.uk/tol/news/tech_and_web/article3617360.ece
Vulnerability Details: http://lenky.net/blog/2008/02/28/view-facebook-private-photos/
TheRegister Link: http://www.theregister.co.uk/2008/03/25/facebook_exposes_private_pics/
MSNBC Link: http://www.msnbc.msn.com/id/23785561


Feed You can follow this conversation by subscribing to the comment feed for this post.

All Comments are Moderated and will be delayed!