Facebook denies mass hijack was down to flaw

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

NEWS

Facebook has denied that a hijack of almost 300 of its groups was due to a security vulnerability, or has endangered any of its users' data.

A spokesperson for the social-networking site said in a statement on Tuesday that no hacking was involved in the hijack.

A group called Control Your Info had been taking control of Facebook user groups in an effort to draw attention to privacy issues.

The group said it had done a Google search to find Facebook groups lacking an administrator. It then joined 289 of those groups, and changed the picture, name and description of the group, to draw attention to potential privacy issues.

"We have seen too many examples where friends and relatives of ours have suffered from their lack of in-depth knowledge concerning their online presence," said the group in a blog post. "People have even lost their jobs over Facebook content. We wanted to do something about this."

A post on one of the hijacked groups read: "We could rename your group and call it something very inappropriate and nasty, like 'I support paedophile's rights'. But have no fear — we won't."

However, Facebook on Tuesday denied that any of its members had been in danger.

"Group administrators have no access to private user information and group members can leave a group at any time," said the Facebook statement. "For small groups, administrators can simply edit a group name or info, moderate discussion, and message group members."

Facebook said that for large groups, the names cannot be changed, and all members cannot be sent a message.

"In the rare instances when we find that a group has been changed inappropriately, we will disable the group, which is the action we plan for these groups," Facebook added.

Some group members did not appear to support Control Your Info's actions. Michael Sixtus posted a message on his group's board describing the privacy campaigners as "ethical hacking net nannies".

Facebook has been the target of hack attacks in the past, including an attack that targeted users with the Zeus banking Trojan.

Talkback

"Group administrators have no access to private user information and group members can leave a group at any time," said the Facebook statement."

Is that before or after some one has lost there job? if group names can be renamed alone that can cause a serious amount of damage, to all in that group.

CA 11 November, 2009 21:30
Reply

almost anything you join on the web - even (or especially) commercial site, are open to change at any time - you might for example sign up to a legitimate dating site that gets bought out by a less reputable outfit. Sure there are things like the data protection act but with international boundaries difficult to police these are not particularly effective, especially as the damage is usually done by the time you could pursue a complaint.

If there is a moral wrong here it is that companies should stoop to prying into what is an employees social life - it is akin to an employer calling into to an employees local pub/bar and enquiring about his drinking habits and behaviour. This is just as public as facebook and yet I imagine most people would be outraged at an employer doing this. I doubt you could legislate against it but there should be an agreed industry code not to continue this kind of snooping - what will they do next, spy on an employees kid's facebook to see what they say about their parents, or randomly look to see if other people have posted information about you?

This is something that pressure groups should really look into - the Ethics of using internet based data!

In the meantime the message needs to go out loud and clear that you should not post anything about yourself that you are worried might bite you back in the future. It would however be a great shame if this were to kill this wonderful social interaction.

gbswales 13 November, 2009 12:05
Reply

Firstly it isn't unnecessary paranoia because the renaming of a group successfully took place.

"I doubt you could legislate against it but there should be an agreed industry code not to continue this kind of snooping"

Secondly how can something be deemed as snooping if you invited your employer or work colleagues to be friends on your social accounts before the event happens?!

Thirdly with just about every form of social medium softwares utilizing some form or other real time live updating notifications to all platforms, throughout you contacts lists how can this be deemed as snooping?

Example;
http://controlyour.info/blog/wp-content/uploads/2009/11/hatemyjob.jpg


"This is something that pressure groups should really look into - the Ethics of using internet based data!"

On what? how to stop the spreading of truths, or fallacy's, there's only two ways of stopping that 1) don't use such sites, or 2) site owners secure the sites better or respond quicker.

"It would however be a great shame if this were to kill this wonderful social interaction."

I'm pretty sure these company's or there user's will manage that all by them selfs given time.

CA 13 November, 2009 21:34
Reply

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Paul Fezziwig

Keep the crap apps out?! How will they compete with Android and Apple's claim to fame of having so many life changing apps? I wonder if the media...

2 hours ago by Paul Fezziwig via Facebook on RIM: BlackBerry will keep 'garbage' apps out of store
Aigars Mahinovs

It has been shown time after time that if there is an author store that sells the songs at even 1$ per song and gives you a high-quality digital...

3 hours ago by Aigars Mahinovs via Facebook on Copyright isn't working, says European Commission
awbMaven

""As a result of Butyka's alleged conduct, researchers were unable to use the computers for more than two months while NASA removed the malicious...

6 hours ago by awbMaven on US indicts Romanian over NASA climate change hack
subhorup

It simultaneously worries me and uplifts me that a self-proclaimed group of internet activists name themselves after Indian mythical figures....

14 hours ago by subhorup on Anonymous activists release PCAnywhere source code
naviathan

It's actually far easier to work anonymously on the internet than you think. With tools like Tor bouncing your traffic around the world before...

17 hours ago by naviathan on Anonymous activists release PCAnywhere source code
Agnostic_OS

1000272134 and bluedalmatian with you both there but then I'm still in 10.04 land (and happy with it)

17 hours ago by Agnostic_OS on Ten factors that make Ubuntu 11.10 a hit
apexwm

Interesting article and definitely see your points on the products mentioned. One of the top products for our Help Desk (approximately 20% of all...

1 day ago by apexwm on Ten flawed products that derail productivity
Paul Hutchinson

Absolutely - this should obviously not be handled my isp - but handled by their hosting operator. What's been suggested here is that my isp police...

1 day ago by Paul Hutchinson via Facebook on MPs urge ISPs to take down terrorist material
Techs UK

Looks like a great phone. I don't notice any deficiencies in WP7. used IOS before, that's pretty good. I don't spend much time in Apps, all i need...

1 day ago by Techs UK on Nokia pins US 're-entry' hopes on Lumia 900
Larry Bloggy

Now with the help of these apps you are always synced with MS outlook while on the move. Just download apps like xobni or outlookreflex and get...

1 day ago by Larry Bloggy via Facebook on Outlook Social Connector beta 2 and the LinkedIn connector
mike40g123

Your details are wrong. The version currently being made is the one with 2 USB ports, 256MB RAM and a network port. This is the Model B. The...

1 day ago by mike40g123 on Raspberry Pi boards set to go on sale
Moley

The thing that has been puzzling me for quite a while is how Anonymous can remain anonymous whilst not only being active on the Internet but also...

2 days ago by Moley on Anonymous activists release PCAnywhere source code
Don Dilly

If what Semantec is saying is rue, that is even worse and shows a complete disregard for thier users. If what Anonymous claims is true and the...

2 days ago by Don Dilly via Facebook on Anonymous activists release PCAnywhere source code
MattChurchy

Didn't seem particularly biased to me either. Oh though you might have mentioned some other competitors with free search and email services...

2 days ago by MattChurchy on Time for an evil umpire: Google, Microsoft & privacy
Simon Bisson and Mary Branscombe

James - exactly as much as anyone paid you for your comment; I don't feel that I need to say that I'm independant and unbiased, but just for you...

2 days ago by Simon Bisson and Mary Branscombe on Time for an evil umpire: Google, Microsoft & privacy
Carl White

Once they realise symantec are willing to pay real money, they will simply keep extorting, unless of course symantec/authorities can use the...

2 days ago by Carl White via Facebook on Symantec offered hackers $50k in source code sting
Jonathan Hassell

You can find more information on BS 8878 by Jonathan Hassell its lead-author at http://www.hassellinclusion.com/bs8878/ The page includes a...

3 days ago by Jonathan Hassell on BSI publishes first British web accessibility standard
servermanagement

Thanks for this list. Now I know, what to include on my system to make it more functional.

3 days ago by servermanagement on Ten flawed products that derail productivity
1000092626

What if it's a 4 car household? The point is, more bandwidth = more things you can do simultaneously, like streaming HD video in one room of the...

3 days ago by 1000092626 on Virgin Media beats 100Mbps schedule, hikes prices
Gary Burton

No point whatsoever increasing broadband download speed. unless ever server on the net has access to massively up rated throughput. The worlds...

3 days ago by Gary Burton via Facebook on Virgin Media beats 100Mbps schedule, hikes prices