Forgot your password?
typodupeerror
Facebook Java Security The Internet

Facebook Hacks Points To Much Bigger Threat For Mobile Developers 59

Posted by samzenpus
from the protect-ya-neck dept.
DavidGilbert99 writes "Facebook admitted last weekend that it was hacked but assured everyone that no data was compromised. However following some investigation by security firm F-Secure, it seems this could be just the tip of the iceberg and that thousands of mobile app developers without the dedicated security team Facebook has in place could already be compromised. The vector for the attack was a mobile developer's website, and the malware used likely targeted Apple's Mac OS X rather than Windows."
This discussion has been archived. No new comments can be posted.

Facebook Hacks Points To Much Bigger Threat For Mobile Developers

Comments Filter:
  • Curious (Score:5, Insightful)

    by koan (80826) on Monday February 18, 2013 @02:47PM (#42937629)

    "Facebook admitted last weekend that it was hacked but assured everyone that no data was compromised"

    Can a hacker really compromise user data any more than the user that freely gave it away?

  • by gl4ss (559668) on Monday February 18, 2013 @02:59PM (#42937759) Homepage Journal

    Can't be that hard to tell! sure it might screw the site over 34023 over but fuck... could just post it.

    without the site name this is just f-secure doing what it usually does - astroturfing! I mean there's literally NO NEW INFORMATION. ok, perhaps it's new information that it was java that was used as applet that was used as attack vector.

  • Re:Curious (Score:5, Insightful)

    by wbr1 (2538558) on Monday February 18, 2013 @03:51PM (#42938213)

    "Facebook admitted last weekend that it was hacked but assured everyone that no data was compromised"

    Can a hacker really compromise user data any more than the user that freely gave it away?

    By hacked, facebook means, freely given user data was stolen without our tithe.

  • by SuperKendall (25149) on Monday February 18, 2013 @05:07PM (#42938807)

    Privilege escalation, arbitrary code execution.

    But now you aren't talking Java exploit. You are talking an OSX exploit too. Not impossible, it's just not mentioned at all. It would imply a flaw in OS X that we'd very much like to know about also, yet it's not discussed.

    That's the all-around problem, the reporting is incredibly shoddy. Is it just Android developers at risk? Just IOS developers? All Mac users because of a new OS X privilege exploit? We are all in the dark with the article as it was, to the point where we can't tell anything.

One man's constant is another man's variable. -- A.J. Perlis

Working...