Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Saturday April 21 2018, @12:57AM   Printer-friendly
from the its-against-our-policy dept.

Submitted via IRC for SoyCow8317

Facebook confirms to TechCrunch that it’s investigating a security research report that shows Facebook user data can be grabbed by third-party JavaScript trackers embedded on websites using Login With Facebook. The exploit lets these trackers gather a user’s data including name, email address, age range, gender, locale, and profile photo depending on what users originally provided to the website. It's unclear what these trackers do with the data, but many of their parent companies including Lytics and ProPS sell publisher monetization services based on collected user data.

Meanwhile, concert site BandsInTown was found to be passing Login With Facebook user data to embedded scripts on sites that install its Amplified advertising product. An invisible BandsInTown iframe would load on these sites, pulling in user data that was then accessible to embedded scripts. That let any malicious site using BandsInTown learn the identity of visitors. BandsInTown has now fixed this vulnerability.

TechCrunch is still awaiting a formal statement from Facebook beyond "We will look into this and get back to you."

Source: https://techcrunch.com/2018/04/18/login-with-facebook-data-hijacked-by-javascript-trackers/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 4, Interesting) by takyon on Saturday April 21 2018, @02:54AM (2 children)

    by takyon (881) <reversethis-{gro ... s} {ta} {noykat}> on Saturday April 21 2018, @02:54AM (#669912) Journal

    Black Mirror [wikipedia.org] has been doing a pretty good job of illustrating the dangers of the social media future.

    --
    [SIG] 10/28/2017: Soylent Upgrade v14 [soylentnews.org]
    Starting Score:    1  point
    Moderation   +2  
       Interesting=1, Informative=1, Total=2
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   4  
  • (Score: 2) by canopic jug on Sunday April 22 2018, @01:11PM (1 child)

    by canopic jug (3949) Subscriber Badge on Sunday April 22 2018, @01:11PM (#670325) Journal

    Black Mirror [wikipedia.org] has been doing a pretty good job of illustrating the dangers of the social media future.

    Dangers or attractive template? Monkey see, monkey do.

    --
    Money is not free speech. Elections should not be auctions.