The big BSides Facebook hoo-ha
Well, hasn't this been an interesting AusCERT...
If you haven't heard by now, Fairfax IT journalist Ben Grubb was briefly detained by QLD police yesterday afternoon in connection to a BSides Australia security presentation delivered on Sunday.
The presentation, by Christian Heinrich, demonstrated a brute-force attack against Facebook's Content Distribution Network. I didn't see the presentation myself, but the long and short of it is the vulnerability demonstrated allows the attacker to obtain Facebook users' private photos.
So how did the police become involved?
You'd think someone at SMH would have deleted http://images.smh.com.au/2011/05/17/REDACTED (and http://images.theage.com.au/2011/05/17/REDACTED) by now, yet it happily sits on a server and is embedded within Facebook link sharing.
Sad. I hope QLD Police do, at the very least, "attempt" to throw the book at cmlh in order to discourage others in the future from conducting a personal attack on a innocent third party.
How about we lock both of these guys in a room with baseball bats.
Otherwise stop talking about something that should be settled through private litigation assuming there's a case to answer for.
Facebook is insecure, we all know that.
Was it hacked or breached .. No..
It happily sends photo's that idiots upload to it, to content servers and them hides access to these through obsfucation.
Did facebook complain that their servers were overloaded during the week long fuzzing.. No...
Who cares if they don't like each other. In my opinion this is being blow way out of proportion with various media types taking sides.
These guys have been at each others throats for years.
Buy them each a baseball bat and move on.
Post new comment
User login
Recent podcasts
-
Get your hack on!
-
A chat with Arbor Networks founder Rob Malan...
-
The RFID devil's in the detail...
-
The programmable network with Christopher Hoff...
-
Who is doing a better job?
Recent comments
- Thanks for that Dave!
As for
1 day 15 hours ago - Congratulations on the Award and Thanks for all the Bleeps
1 day 20 hours ago - Yeah fully -- we'll give it a
2 days 20 hours ago - Was the vmware code ever released on May 5?
3 days 12 hours ago - BYOD tradeoffs misunderstood?
4 days 1 hour ago - awesome
4 days 14 hours ago - Congrats
1 week 3 days ago - Hey there Daniel, thanks for
1 week 6 days ago - Congratulations!
2 weeks 7 hours ago - Hey there... yeah it was
2 weeks 2 days ago




Exactly...meh.