RSS Home Newsletter Advertising
Visit Twellow.com

You're Not Safe Using Facebook Apps


Researchers Test Facebot

In the name of finding any possible way that hackers can get at your data, a group of researchers has penetrated Facebook via a could-be-malicious application proving that Facebook Apps are unsafe. The app seems harmless enough. It's a National Geographic "photo of the day" app that gives users (obviously) a different photo each day.

Facebot App

What users of this app don't see, however, is that there are some evil (if in the wrong hands) things going on behind the scenes. The research paper gets a little complicated, but PC World sums it up nicely:

In the background, every time the application is clicked, it sends a 600 K-byte HTTP request for images to a victim's Web site.

Those requests, as well as those images, are not seen by someone using Photo of the Day, which the researchers have termed a "Facebot" application. The effect is a flood of traffic to the victim's Web site, known as a denial-of-service attack.

According to the researchers, a "facebot" application could grab personal details from a user's Facebook account and post them to a remote server. This should make application users feel a little uneasy, particularly those who like their privacy.

Ryan Singel at Wired says, "Now, coders who control a really popular social networking app aren't likely to jeopardize their oil well for a prank, but it would not be hard for a slightly popular application to become rogue without anyone ever knowing or being able to figure out it was happening."

The research paper points out that Facebook could prevent such applications from appearing on the social network. They would have to make sure that the apps didn't interact with outside hosts.

Social network security is probably going to be an increasingly important topic as social media continues to gain popularity, and see widespread use among more platforms. Social networks are being integrated more with mobile devices, blogs, and business web sites, and this is where trouble could really start to snowball.

Digg This! StumbleUpon This!
AddThis Social Bookmark Widget

About the author:
Chris Crum is a staff writer for WebProNews and iEntry Network.

Comments

So what is the big

So what is the big news?

That anything can be hacked somehow sometime on the internet?

 

Interesting

Hmm... I would think that there are far easier ways of doing a DOS attach than building a facebook app.  I am wondering what the financial advantage of such a thing would be.

Media Campaign for Equity

I'm interested in reaching social network websites who are interested in trading equity for a $10,000,000 media campaign.

I read this paper and added

I read this paper and added the app (http://www.new.facebook.com/apps/application.php?id=8752912084)

It sounds cool that Facebook can become an attack platform.

I am wondering if Facebook has security holes, like this described in the paper .....

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Post new comment

The content of this field is kept private and will not be shown publicly.
CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
8 + 7 =
Solve this simple math problem and enter the result. E.g. for 1+3, enter 4.