June 22, 2009 8:08 AM PDT

New Facebook blog: We can hack into your profile

by Caroline McCarthy
  • Font size
  • Print
  • 17 comments

Well, here's an innovative way to get some buzz: FBHive, a new blog devoted to the discussion of all things Facebook, has debuted with the revelation that its creators have discovered a hack that can expose some crucial profile data.

No, it won't expose your personal photos or wall posts. But, FBHive says, it can bring up all the "basic information" that you have entered into your profile, even if you've elected to keep that information private. This is the section that includes location, gender, relationship status, relationships (significant other, parents, siblings), political views, religious views, birthday, and hometown. That's enough to be a problem in the identity theft department, as it could easily expose frequent password hints like dates of birth and mothers' maiden names.

Security holes are nothing new to social networks: last year, Facebook plugged a leak that exposed members' protected photos via the Facebook mobile site, and another hole was discovered about a year ago that exposed members' birth dates.

Admirably, FBHive has not shared the details of the newly discovered hack; more disconcertingly, it said Facebook has done nothing since it alerted the social network to the issue earlier this month.

"We are not malicious hackers, by any means, and our skills are far from advanced," the post read. "We here at FBHive are fans of Facebook, but when a security hole as big as this is discovered and brought to (Facebook's) attention, it shouldn't take 15 days to fix."

A Facebook representative said the company is currently "looking into" the matter and will have more information soon.

UPDATE at 11:14 a.m. PT: "We have identified this bug and closed the loophole," an e-mailed statement from Facebook read. "We don't have any evidence to suggest that it was ever exploited for malicious purposes."

Caroline McCarthy, a CNET News staff writer, is a downtown Manhattanite happily addicted to social-media tools and restaurant blogs. Her pre-CNET resume includes interning at an IT security firm and brewing cappuccinos. E-mail Caroline.
Recent posts from The Social
Facebook COO nominated to Disney board
Facebook app privacy: It's complicated
Snowstorm blankets Web with high shopping traffic
Big Facebook privacy void: Controls on Connect
Twitter? Profitable? Really?
Yelp bails on Google deal?
Facebook to hold spring F8 dev conference
What would Yelpers think of a Google buyout?
Add a Comment (Log in or register) (17 Comments)
  • prev
  • 1
  • next
by techman21 June 22, 2009 8:41 AM PDT
15 days isn't that long when you're talking about finding, fixing, and testing code.
Reply to this comment
by clamenza June 23, 2009 9:25 AM PDT
It is for as large a site as fb and an apparently simple hack that you're notified of.
by iff2mastamatt June 22, 2009 10:45 AM PDT
Or you can not even post personal data you don't want anyone to see. Facebook doesn't require you to enter all the data you're presented, such as birthday, location, political views, religious views, and your hometown.
Reply to this comment
by joelam888 June 22, 2009 11:06 AM PDT
iff2mastamatt, you are not required to use Facebook, too. LOL!
Reply to this comment
by Indyan June 22, 2009 11:27 AM PDT
Something is seriously wrong with facebook support and technical team. It took 2 months and a post on TechCrunch to get them working on the Click Fraud issue. And now this. Not good.
Reply to this comment
by clamenza June 23, 2009 9:27 AM PDT
They've got a captive user base so they don't care. (I know a lot of people talk about how "fickle" social networking users are but I don't think so. You can't just move to another system until there's a critical mass, which myspace has now found it never actually had.)
by jacomo June 22, 2009 11:54 AM PDT
And let's make sure we sell part interest in Facebook to the Russian Mafia, who will eventually have a heyday with all our Private information. DO not venture to tell me the Mob does not have influence in all aspect of Russia business.
Reply to this comment
by nmcphers June 22, 2009 12:49 PM PDT
I emailed Yahoo 3 years ago about a flaw in which someone could reset your password and take control of your account if they knew what year you were born, and what City you were born in. They did nothing to fix it. I'm sure Sara Palin yahoo account was hacked the same way while she was running for VP. Just a couple months ago they made some changes, so maybe that hole is plugged, I don't know.
Reply to this comment
by pentest June 22, 2009 5:47 PM PDT
She got "hacked" because she is stupid and used a simple, english dictionary word.

There is no protection against stupidity.
by Harrison912 June 23, 2009 10:52 PM PDT
I mainly use FaceBook to socially market my safety and security web site so I'm always interested in any security issues. Hopefully they've gotten a fix for this problem. Thanks, Caroline, for this information.
Reply to this comment
by king-salomon1000 June 25, 2009 1:30 AM PDT
Hackers making money by hacking Facebook:
http://news.cnet.com/8301-1009_3-10205476-83.html

Information Security Solution:
www.ISC-Tech.com
Reply to this comment
by huanglimei July 17, 2009 9:04 PM PDT
<a href="http://www.ed-hardy.cc/ed-hardy-women-accessories/ed-hardy-woman-belts.html">ed hardy women belts</a>
Reply to this comment
by huanglimei July 17, 2009 9:05 PM PDT
http://www.ed-hardy.cc/ ed hardy
Reply to this comment
by huanglimei July 17, 2009 9:06 PM PDT
<a href="http://www.ed-hardy.cc/">ed hardy</a>
Reply to this comment
by CatBratTCA October 5, 2009 10:56 AM PDT
Hi. my facebook account was hacked last week and I;m still locked out of it, the worst part is from my husbands account I can see the persons email address and can't do anything.
I'm still waiting for Facebook to do something about it!!!!!! They don't even freeze the account while it's been sorted out and to me that's totally wrong.
Reply to this comment
by MERLINCVV November 6, 2009 5:51 PM PST
hello.I sell cvv of all country u need. ccv gold and platinium
bank login,dump+pin.WU TRANSFERT MSRW 206 MSR 500EX MSR 600 etc!!!
DUMP With ATM PIN
Usa:
Visa Classic, MasterCard Standard - 80$
Visa Gold | Platinum | Business, MasterCard Gold | Platinum - 110$
Canada:
Visa Classic, MasterCard Standard - 120$
Visa Gold | Platinum | Business, MasterCard Gold | Platinum - 150$
EU, UK:
Classic/Standard =130$
Gold/Platinum =160$
Business/Signature/Purchase/Corporate/World =200$
Other countries:
MasterCard| Visa Classic - 80$
Visa Gold|Platinum|Corporate|Signature|Business ? 120$
DUMP
EUROPE/ASIA/LATIN/AU
classic $70/Gold $80/Platinum $90/Signature&Purchasing $100/
Businesss&Corporate $120/Infinite $150/Amex $50
CANADA
CLASSIC $30/Gold $35/Platinum $45/Purchasing&Signature $45
Business&Corporate $50/Infinite $100/Amex $30
USA
CLASSIC $25/GOLD $30/PLATINUM $35/SIGNATURE&PURCHASING $45
BUSINESS/CORP $55/Master World $40/DISCOVER $35
Diners Club $60/Amex $35
CVV FRESH
US Cvv Visa and Master price $2/cvv if u buy bulk than = 100/cvv price $1.5/cvv
US Cvv Amex and Discovery price $5/cvv if u buy bulk than 100/cvv price $4.5/cvv
CA Cvv Visa and Master price $4/cvv if u buy bulk than = 100/cvv price $3.5/cvv
CA Cvv Amex and Discovery price $5/cvv if u buy bulk than 100/cvv price $4.5/cvv
UK Cvv Visa and Master price $6/cvv if u buy bulk than = 100/cvv price $5/cvv
UK Cvv Amex and Discovery price $8/cvv if u buy bulk than 100/cvv price $7/cvv
AU Cvv Visa and Master price $6/cvv if u buy bulk than = 100/cvv price $5/cvv
AU Cvv Amex and Discovery price $8/cvv if u buy bulk than 100/cvv price $7/cvv
EU Cvv Visa and Master price $10/cvv if u buy bulk than = 100/cvv price $9/cvv
EU Cvv Amex and Discovery price $12/cvv if u buy bulk than 100/cvv price $11/cvv
Cvv Japan is price $15 fo one cvv
Cvv Italy is price $15 fo one cvv
Cvv France is price $15 fo one cvv
Cvv Germany is price $15 fo one cvv
Cvv Sweden is price $15 fo one cvv
Cvv Arabesque is price $15 fo one cvvCVV Selling Option :
We Checked Cvv B4 Sell You.
We Replace Dead Cvv In 48 Hurs.
You can buy cvv directly in our website but is $80 for get an account
FULLZ
Firstname, Lastname, Address, City, State, Zipcode, Phone, SSN, Mother'sMaidenName, DOB,
Driver's License # and state, Email pass , Verifiedbyvisa pass, Cardnumber, Expiry Date, CVV2,
Employment, Position Held
Bank pass, number, name, account number and Routing Number and other infoz.
cc fullz info us = $15
cc full info uk & eu & asia = $20
We Have Shopadmin, cc in this shopadmin have full info
BANK LOGIN :
Bank Login From Usa And Eu And Uk And Asia Is Avaiable.
AVAILABLE BANK LOGIN :
Abbey/HSBC/Bremer Online Banking/Flagstar Bank/Credit Union/Landmark/Orchard/American Express/Wells Fargo/ICICI Bank/HDFC Bank/CITIBANK/BOA/BARCLAYS/BDE/SPAINEXPAT/BANESTO/ANDALUCIA/BANKKUWAIT/NBK/BURGAN/CBK/ABK/ISRAEL/BANKISRAEL/MSNBC/DISCOUNTBANK
PRICES TO JOIN HACKING CLASSES
Hacking Classes for 1 months : $1000
Hacking Classes for 3 months : $2500
Hacking Classes for 6 months : $5.500

DUMP R/W MACHINE:
MSR206 R/W USB $600USD EMBOSSER $200USD ATM SKIMMER WINCOR $550USD
NCR $400USD

contact infos:
yahoo: nightwolf49@ymail.com
icq: 575953835
msn: nightwolf49@hotmail.fr
Gmail: nightwolfcvv@gmail.com
Reply to this comment
by Jennifer_johnson November 17, 2009 6:40 AM PST
Not sure about FBHive but my facebook account is hacked twice now i dont believe on such appilications any more because the same stuff happened to my friend as well. Face is very userfriendly for every tpye of person doesnt matter u belong from a [url=http://www.itbusniessdir.net] business [/url] or a student but still few evil genius are taking advantage of this.
Reply to this comment
(17 Comments)
  • prev
  • 1
  • next
advertisement

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About The Social

CNET News' Caroline McCarthy is a downtown Manhattanite who believes that, despite popular opinion, the Web can actually help your social life. She's happily addicted to fun social-media tools from Twitter to Yelp to Facebook, sends an inordinate number of text messages, and has a tendency to waste time at the office reading restaurant blogs. Here, she explores all facets of the Web's gregarious side, as well as the unique tech culture in her home city of New York. (Don't call it Silicon Alley.)

Add this feed to your online news reader

The Social topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right