The big BSides Facebook hoo-ha
Well, hasn't this been an interesting AusCERT...
If you haven't heard by now, Fairfax IT journalist Ben Grubb was briefly detained by QLD police yesterday afternoon in connection to a BSides Australia security presentation delivered on Sunday.
The presentation, by Christian Heinrich, demonstrated a brute-force attack against Facebook's Content Distribution Network. I didn't see the presentation myself, but the long and short of it is the vulnerability demonstrated allows the attacker to obtain Facebook users' private photos.
So how did the police become involved?
You'd think someone at SMH would have deleted http://images.smh.com.au/2011/05/17/REDACTED (and http://images.theage.com.au/2011/05/17/REDACTED) by now, yet it happily sits on a server and is embedded within Facebook link sharing.
Sad. I hope QLD Police do, at the very least, "attempt" to throw the book at cmlh in order to discourage others in the future from conducting a personal attack on a innocent third party.
How about we lock both of these guys in a room with baseball bats.
Otherwise stop talking about something that should be settled through private litigation assuming there's a case to answer for.
Facebook is insecure, we all know that.
Was it hacked or breached .. No..
It happily sends photo's that idiots upload to it, to content servers and them hides access to these through obsfucation.
Did facebook complain that their servers were overloaded during the week long fuzzing.. No...
Who cares if they don't like each other. In my opinion this is being blow way out of proportion with various media types taking sides.
These guys have been at each others throats for years.
Buy them each a baseball bat and move on.
- Topic Locked
Recent Posts
-
A global vulnerability analysis…16 hours 46 min ago
-
In some cases, yes!16 hours 48 min ago
-
Handy talk for CIOs and CSOs...16 hours 50 min ago
-
How far do decent crypto controls get us?16 hours 51 min ago
-
A call to action for infosec pros…16 hours 54 min ago
Recent comments
- Since you asked...
I enjoyed
15 hours 35 min ago - Love the Das Efx tribute.
11 weeks 1 day ago - LOL so no comment by Adobe's
12 weeks 2 days ago - Welcome back, great stuff as
14 weeks 6 days ago - AEDs are very accurate and
21 weeks 2 days ago - I did see that after we
21 weeks 4 days ago - Great podcast, a small
22 weeks 3 days ago - Peck of pickled peppers? We
25 weeks 1 day ago - Link to Sophail: Applied
27 weeks 6 days ago - Fixed. I got autocorrected...
30 weeks 23 hours ago




Exactly...meh.