A variation of a hack called the ROBOT ATTACK left Facebook susceptible to stolen user accounts until a trio of researchers brought it to their attention. By exploiting weakness in website encryption that’s been around since 1998, an attacker could pull off a man-in-the-middle attack to steal user information—including passwords that would give the hacker full control of a given account.
The researchers say that while Facebook fixed the bug, almost one in three of the top 100 most-trafficked sites on the web remain vulnerable. It’s not the easiest hack to pull off, especially at scale, but it’s still concerning that such an old trick still affects so many sites—many of which don’t appear to be in a rush to fix it.
Now would also be a good time—not that there's ever a bad one—to double check your Facebook privacy and security settings generally; the video below walks you through the process with a quick step by step.
No comments:
Post a Comment