Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years

Found on Krebs on Security on Thursday, 21 March 2019
Browse Internet

The Facebook source said the investigation so far indicates between 200 million and 600 million Facebook users may have had their account passwords stored in plain text and searchable by more than 20,000 Facebook employees.

A written statement from Facebook provided to KrebsOnSecurity says the company expects to notify “hundreds of millions of Facebook Lite users, tens of millions of other Facebook users, and tens of thousands of Instagram users.”

How that company is still in business gets harder and harder to understand every day. It's been well known for years know what Zuckerberg thinks about its users.

From MySpace to MyFreeDiskSpace: 12 years of music – 50m songs – blackholed amid mystery server move

Found on The Register on Monday, 18 March 2019
Browse Internet

MySpace, the Norma Desmond of social networking platforms, appears to have lost all the music uploaded to the site since its founding in 2003 through 2015, a blunder the company reportedly attributes to a failed server migration.

The lost files – said to amount to 50 million songs from 14 million artists – appear to be unrecoverable. Videos, photos, and other posted content may have vanished too.

Either it's a massive incompetence (no working backups) or a cheap excuse for getting rid of old data. The former is possible, but the latter more realistic.

Tumblr porn ban: One-fifth of users have deserted site

Found on Independent on Friday, 15 March 2019
Browse Internet

Visits to the Tumblr website fell from 521 million in December to 437 million in January, according to data from web analytics firm SimilarWeb.

The decision to ban adult content on Tumblr proved controversial among many users and prompted a movement known as the “log off” protest to encourage people to leave the site.

Numbers will probably go down even more and soon Tumblr can say hello to Myspace and Geocities.

Less than a month to go before Google breaks hundreds of thousands of links all over the Internet

Found on Philip Greenspun’s Weblog on Monday, 11 March 2019
Browse Internet

Google purchased Picasa, a super efficient photo editor that offered seamless integration with online publishing (e.g., you add a photo to an album on your desktop computer and it automatically gets pushed to the online version of the album).

It was so easy to publish the photos via Picasa that I just linked to the photo album from the HTML page. Now I will have to move the photos somewhere else, edit the HTML file, git push, git pull, etc. Then repeat for every other blog posting and web page that links to a Picasa-created album.

So, in other words, someone is annoyed because a free service ends and his "cloud gallery" vanishes. Just learn from it and do not trust the cloud to be there forever; if you want to have control over your data, take care of it yourself. Maybe some people will learn this valueable lesson with Picasa going down.

800+ Million Emails Leaked Online by Email Verification Service

Found on Security Discovery on Friday, 08 March 2019
Browse Internet

On February 25th, 2019, I discovered a non-password protected 150GB-sized MongoDB instance. This is perhaps the biggest and most comprehensive email database I have ever reported.

In addition to the email databases this unprotected Mongo instance it also uncovered details on the possible owner of the database – a company named ‘Verifications.io’ – which offered the services of ‘Enterprise Email Validation’. Unfortunately, it appears that once emails were uploaded for verification they were also stored in plain text.

Verifications.io seems to be down and gone now. Nothing to be sad about, because it looks like all they did was to spam the submitted email address with pointless mails to filter out those which are dead. So, more like a tool for spammers than for legit business people.

Zuckerberg: Facebook will shift focus to private networks instead of open ones

Found on Ars Technica on Thursday, 07 March 2019
Browse Internet

On Wednesday, Facebook CEO Mark Zuckerberg published a more-than-3,000-word blog post that seems to declare a major shift in Facebook's strategy. In it, he says he believes that "a privacy-focused communications platform will become even more important than today's open platforms."

Zuckerberg has announced privacy initiatives in the past, but then not delivered on them. This lengthy blog post guarantees nothing but the start of a new phase of the conversation.

It's just another one of his lies; don't fall for it. He will still use every information about you.

French tax on internet giants could yield 500 million euros per year: Le Maire

Found on Reuters on Monday, 04 March 2019
Browse Internet

Le Maire told Le Parisien newspaper the tax is aimed at companies with worldwide digital revenue of at least 750 million and French revenue of more than 25 million euros.

The paper listed Google, Amazon, Facebook and Apple (the four so-called “GAFA” companies) but also Uber, Airbnb, Booking and French online advertising specialist Criteo as targets.

How about making them pay the current taxes first, for a start?

Facebook Finally Shuts Down Its Snooping, Bullshit 'VPN' After A Full Year Of Complaints

Found on Techdirt on Saturday, 02 March 2019
Browse Internet

Just about a year ago we noted how Facebook was taking some heat on the security and privacy fronts for pitching a "privacy protecting" VPN to consumers that actually violated consumer privacy.

A wide variety of different news outlets were quick to point out that Facebook was actually using the "privacy" app to track users around the internet when they wandered away from Facebook, then using that data to its own competitive advantage.

Facebook continued to market and push the VPN as a privacy tool while undermining the whole point of said privacy tool.

Facebook and privacy are mutually exclusive. It will use every method, no matter how immoral and unethical, to collect data about everybody; because that is its core business.

YouTube Will Disable Comments on Nearly All Videos With Kids

Found on Variety on Friday, 01 March 2019
Browse Internet

YouTube said in a blog post Thursday that over the past week it had already shut off comments for “tens of millions of videos” that could be subject to predatory behavior. Now, it will expand that to suspend comments on virtually all videos featuring young minors, as well as videos featuring older kids that “could be at risk of attracting predatory behavior.”

That's a quite nuclear reaction for what appears to be a rather small issue.

Pinstagram? Instagram code reveals Public Collections feature

Found on Techcrunch on Saturday, 23 February 2019
Browse Internet

Code buried in Instagram for Android shows the company has prototyped an option to create public “Collections” to which multiple users can contribute.

People could use the feature to bundle together their favorite memes, travel destinations, fashion items or art.

Pinterest is one of the worst and most useless websites.