Government Security
Network Security Resources

Jump to content

Photo

Facebook User Data For Sale

- - - - -
  • Please log in to reply
3 replies to this topic

#1 Stephen

Stephen

    Commander In Chief

  • GSO Management
  • 1,807 posts

Posted 05 June 2012 - 07:54 PM

This goes to show you why using facebook apps are not safe, it is just too easy for someone to create an app that you think is cool then sell your information.


http://www.payable.c...-id-with-emails
Posted Image

#2 Stephen

Stephen

    Commander In Chief

  • GSO Management
  • 1,807 posts

Posted 05 June 2012 - 08:00 PM

another 1.5 million for sale: http://www.payable.c...duct/229/gggggg
Posted Image

#3 Juno

Juno

    Specialist

  • Sergeant Major
  • 142 posts

Posted 06 June 2012 - 11:16 AM

Good link. Personally I don't use any apps at all on Facebook, and don't recommend using them in general. FB has enough user information without a third party coming in to harvest it.
Hacking The Everyday - My blog blabberings about life, computer security, and everything in-between.
Don't forget to Read the Rules before you post!

#4 docparadox

docparadox

    Private

  • Members
  • 2 posts

Posted 17 June 2012 - 10:57 PM

Too many "free" Android apps (and probably iPhone apps) also demand too much access to your information upon downloading and installing. I guess aside from horribly annoying ads, they're also collecting your information with your given consent. Who reads the policies, terms, and conditions anyway? Most people are barely attentive enough (or care enough) to learn how to use their devices more than half-way through.

Nice post; every time I see something like this I remember all the careless people who have no idea what sort of wolves and hawks they're involved with in this whole internet thing.

Own edit: the information they're providing on those lists can technically just be captured by a bot that searches for public profiles and records the necessary data. All that's needed is to provide the bot with a Facebook account and it can run a passive name-dictionary search on Facebook's search engine and check on every given profile for the existence of the data. If so, then record first name, last name, e-mail address, and URL captured at (ID's are still extract-able from most FB account URL's). Tempting to program a bot real quick and see if Facebook blocks such behavior on its search engines (then I'd probably do a random hop algorithm, - maybe even slow down search speed and leave it on for a few hours).

Edited by docparadox, 18 June 2012 - 12:17 AM.

- Yonnan

"It's not about what you know or what you do; it's about who you know.and sometimes who you do."
- if someone cared about you in the military and knew this piece, they passed it on to you