Showing posts with label facebook. Show all posts
Showing posts with label facebook. Show all posts

Sunday, 13 December 2015

Hey Guys,


It's been a long time I've posted something. (Was busy with Exams :p ). But now I am back with an important issue being raised again & again. Let's See...




One of my follower sent me a message telling the issue he is facing and he was sure that his password is strong and no one has access to his Facebook account.

Then who do you think is the one behind it ?

Let's not give you the answer but instead ask you few questions...

  • 1. When some websites ask you to "Login With Facebook" and Then after logging in why don't you have to type in your details like - "Name, email or add picture for display".
  • 2. When you play an android game like "Subway Surfers" and then it asks you to connect with Facebook. After logging in, have you ever thought that just by clicking share button on game, how are you able to share your achievement on your account ?
  • How is an Autoliker tool giving you likes ? From whose accounts ?



Unlike all pages at once - Facebook



 Now let's try to answer

When the user login(s) to the website, it redirects you to the page where it asks for your permissions that you grant to their application


And when you permit the application for the activities it is asking for, it'll be able to operate your account without again asking anything. Even if you are logged out the application will be able to use your account. Here's list of permission and activities that an application can perform from your account without asking you again.


Applications can operate your account with your own permission.

Non-trusted applications that takes your permission can 90% takeover your account and perform all the actions. Auto-Likers(HTC SENSE), Fun apps etc. can force you to like other posts or even send friend requests.


How to save my account ?

  • First of all we need to take back the permissions from the application.
  • Click here to see all applications.
  • Find out the untrusted or unwanted ones.
  • Click on the application and choose "Remove app".



Now the account is safe and you can undo all actions by choosing the actions you haven't performed. To see the activities performed, Go to the activity log on your profile page.


Hope You liked The Post, Stay Connected ;)

Read More

Saturday, 28 February 2015


Do you know that your Facebook account can be accessed by Facebook engineers and that too without entering your account credentials? Recent details provided by the social network giant show who can access your Facebook account and when.

No doubt, Facebook and other big tech companies including Google, Apple and Yahoo! are making their services out of reach from law enforcement and spies agencies, but at the same time they itself, at least some employees, have access to your personal data.

Earlier this week, director at the record label Anjunabeats, Paavo Siljamäki, brought attention to this issue by posting a very interesting story on his Facebook wall. During his visit to Facebook office in LA, a Facebook engineer logged into his Facebook account after his permission, but the strange part — they did it without asking him for the password.

ACCESS WITHOUT NOTIFICATION
Facebook even didn’t notify Siljamäki that someone else accessed his private Facebook profile, as the company does when your Facebook account is accessed from any new device or from a different Geo-location.
Siljamäki got in contact with Facebook in order to know how many of Facebook's staff have this kind of 'master' access to anyone's Facebook account and when exactly they can access users’ private data, and also, how would anyone know if his/her Facebook account has been accessed.
When the social network giant asked about how the employee got access to user’s Facebook account without entering the account credentials, Facebook issued the following statement :

"We have rigorous administrative, physical, and technical controls in place to restrict employee access to user data. Our controls have been evaluated by independent third parties and confirmed multiple times by the Irish Data Protection Commissioner’s Office as part of their audit of our practices."

WHO CAN ACCESS MY FACEBOOK ACCOUNT? 

The company didn’t explain exactly who can access what, but it assured its users that the accounts access is tiered and limited to specific job function. The access to accounts are granted to most employees in order to reply to a customer request for information or error report.


"Designated employees may only access the amount of information that’s necessary to carry out their job responsibilities, such as responding to bug reports or account support inquiries," Facebook goes on explaining. "We have a zero tolerance approach to abuse, and improper behaviour results in termination."

In short, the social network giant has a customer service tool that can grant Facebook employees access to a user’s account. Facebook runs two separate monitoring systems that generate weekly reports on suspicious behaviour which are then reviewed and analyses by two independent security teams, specifically a selected group of employees.

Facebook gives a strict warning when hired employees to use this tool and fired any employee directly who abuse it. So, you need not to worry about Mark Zuckerberg accessing your account, unless you yourself ask Facebook for help with something and have given permission.





Learn About Website Defacement
Read More