CGISecurity Logo

Paris Hilton pwned via facebook flaw

"A security lapse on Facebook has allowed its users to gain access to
vast libraries of private photographs, including one of Paris Hilton
drinking beer with her friends.

A Canadian hacker exploited a recent upgrade to the networking
site's privacy settings to view pictures that were intended to be
private, including some of Paris Hilton partying with her brother,
Barron Nicholas, at the recent Emmy awards.

Facebook was told about the problem yesterday afternoon, and said it had since fixed the bug.

Byron
Ng, a computer technician from Vancouver, began looking for flaws in
the site's security after an upgrade last week purportedly gave
Facebook's 40 million users greater control over the way they shared
material such as photographs with their friends.

Mr Ng found that he was able to pull up recent pictures posted by
Facebook users, even if the owners intended them only to be seen by a
select group of friends. "

Article Link: http://technology.timesonline.co.uk/tol/news/tech_and_web/article3617360.ece
Vulnerability Details: http://lenky.net/blog/2008/02/28/view-facebook-private-photos/
TheRegister Link: http://www.theregister.co.uk/2008/03/25/facebook_exposes_private_pics/
MSNBC Link: http://www.msnbc.msn.com/id/23785561