rajathagasthya
Joined 11 years ago
Karma
2,127
Submissions
410
Member since
Mar 18
Recent submissions
Comment · 8 years ago
Comment · 8 years ago
Possible. Some more technical details would be nice, but I doubt Facebook releases the post-mortem to the public.
Comment · 8 years ago
> This attack exploited the complex interaction of multiple issues in our code. It stemmed from a change we made to our video uploading feature in July 2017, which impacted “View As.”
Obviously, Facebook is an extremely complicated system. But I find it hard to believe a video uploading feature would impact 'View As'.
Comment · 8 years ago
Ah, never knew that!
Comment · 8 years ago
I hate how it collapses the left menu bar (Inbox, Drafts, Sent etc) to icons only and then has a big lag to open the menu drawer and show the texts when you hover over it. Gmail was better when it was simpler.
Comment · 8 years ago
This reminds of a story I read a while back about India's spy agency (RAW) allegedly kidnapping a retired Lt. Colonel from Pakistan's spy agency (ISI) in Nepal using his LinkedIn information as a 'job bait'. From [1]:
> The complainant alleges that some months ago a person called Mark Thomas called his father on his phone number 033434443 from a number in the UK 0044-7451722 and offered him a job at the Strategic Solutions Consultancy firm.
> It now transpires that Lt Col Zahir had put up his bio-data on LinkedIn and some other websites seeking a job opportunity three years after he retired from the Pakistan army.
In short, LinkedIn's data is very, very valuable.
[1] - https://www.indiatoday.in/mail-today/story/pakistan-media-ra...
Comment · 8 years ago
This looks great! Are there any beginner friendly issues for contribution? Didn't find a related tag in Github issues.
I get this part. But why would it affect only videos and not other entities (photos, status etc.)? I would think creating (or uploading) any of the entities have the same authorization and authentication ramifications. What could be different for videos? Unless the privacy models are so fine grained that you can have different privacy settings for different entities (haven't used Facebook in years, so I don't really know). Your explanation makes sense, I'm just looking for a concrete example.