• On BNET: 3 worst things about the iPhone 3G S
July 16, 2008 2:13 PM PDT

Facebook fixes hole that exposed birth dates

by Elinor Mills

Facebook said on Wednesday that it fixed a hole that exposed the birth dates of members during a public beta of a new design for profile pages earlier this week.

Security company Sophos alerted Facebook to the problem and is suggesting that Facebook users input fake birth dates instead of real ones to prevent any similar problems going forward because of the risks from identity fraud.

"My advice to Facebook users would be, even if your data of birth is set to be non-visible, change it to a made-up date in case this kind of blunder happens again," Graham Cluley, senior technology consultant at Sophos, said in a statement. "Facebook and other social-networking Web sites need to be more careful about protecting their members' data, or risk losing users."

A Facebook representative released this statement in response: "For a brief period of time, a small number of users were able to access a private beta of Facebook's new site design meant only for developers. During that time, some of those users had their birthdays revealed due to a bug. The problem was identified and promptly resolved."

Cluley goes into more detail on his company's blog.

And here's a YouTube video that illustrates the problem:


Facebook is scheduled to roll out the new profile page design to users this week.

In an identity theft-related study done last year, Sophos found that 41 percent of Facebook users, or more than two in five, were willing to reveal personal information to a complete stranger.

Late last month, the company suspended the Top Friends app after it was learned that the app was revealing profile data that users wanted to keep private.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
advertisement
Click here!
Recent posts from Security
Symantec's Ramzan on solving the antivirus puzzle
Apple fixing iPhone SMS security hole
Waledac worm targeting July 4 spam offensive
ATM vendor gets security talk pulled from conferences
Postini: Google's take on e-mail security
Botnets lead the way for spam
Stallman warns of Mono 'risk'
China delays rule for Net-screening software
Add a Comment (Log in or register)
by Harrison912 July 17, 2008 10:22 AM PDT
I use FaceBook daily for socially marketing safety and security awareness as well as my products that will enhance it. Thank you for alerting me to this problem.

I'm glad to hear FaceBook has fixed the problem. Since safety and security are my business, I'm concerned about my security as well as that of my customers, who many of them are FaceBook account holders.
Reply to this comment
advertisement

Making sense of Windows 7 upgrades

faq The basics and the fine print on Microsoft's options for those eyeing the next operating system from Redmond.
• Full Windows 7 coverage

Road Trip 2009: Big Sky Country

CNET News reporter Daniel Terdiman takes his car full of gadgets to the Rockies and the Great Plains in search of tech, science, nature, and more.
• America's Fortress: Cheyenne Mountain

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right