Facebook Bug Found
Khalil Shreateh, a Palestinian developer and hacker, discovered that there was a way to bypass Facebook's privacy settings and post on anyone's timeline — even users who are not your friends.
He first report this bug to Facebook but Facebook didn't consider it as a bug, to prove his work Shereateh posted on Zuckerberg's timeline.
Later on Facebook permanently deactivate his account.
Facebook declined to comment further. Besides, the bug was fixed on Thursday, according to Jones.
Shreateh won't be rewarded for his finding, because he violated the disclosure policy.
Let's see what's the bug:
Go to your timeline and in post column write a post, wait! do not post this. Now open your any friend's timeline and try to get his/her Facebook id, you can do this by using graph search of Facebook. For graph search, go to URL bar of your browser and type in format as shown below:
graph.facebook.com/Facebook username of friend
Now copy that id. Now go to your wall where you write the post. Right-click there and choose inspect element. Now replace your id with your friend id in script.As per hint search the line in script as shown in picture:
And in return you'll find that your post is on the timeline of the id that you replaced with your's.
No comments:
Post a Comment