Friday | 5 September, 2008
Computerworld
Facebook bug leaks members' birthday data
Facebook accidentally exposed the birth dates of its 80 million members over the weekend.
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.

Newsletter Subscription

Sign up for our Computerworld newsletters!
Computerworld's twice-daily news service keeps you in touch with the latest, most important headlines from Australia and around the world.
Keep up with the latest virtualisation technologies, products, news and features.
RSS Feeds

A glitch in a test version of Facebook's Web site inadvertently exposed the birthdays of Facebook's 80 million members this week.

The bug was discovered over the weekend by Sophos Senior Technology Consultant Graham Cluley. While checking out Facebook's new design, Cluley noticed that the birth dates of some of his privacy-obsessed acquaintances were popping up when they should have been hidden.

Facebook allows users to control who sees private information such as their birth date, which can be a valuable nugget of data for identity thieves. But Cluley discovered that the new site was making this information public to other members. "Their new profile page essentially ignored the privacy setting to withhold the data of birth," he said.

"For a brief period of time, a small number of users were able to access a private beta of Facebook's new site design meant only for developers. During that time, some of those users had their birthdays revealed due to a bug," Facebook said Wednesday in a statement. The company could not say exactly how long this data was exposed or how many people viewed the beta site, but the bug was patched within hours of Cluley's discovery.

Facebook may intend for the beta site to be private, but it has been open to the general public for several days. It features a new profile design that should be rolled out as an option to Facebook users some time this week.

Cluley himself did not consider this a major data breach, but he said it should serve as a warning to people who put a lot of information on social networks. "It raises a more serious question which is, 'Can you trust these social networks to look after your data properly?'" he said.

Facebook is sensitive about privacy. In November the company scrambled to fix its Beacon ad system after a CA researcher discovered that the system was collecting data on users' online behavior, despite Facebook's assurances to the contrary.

"With Beacon we just screwed it up," said Matt Cohler, the company's vice president of product management, during a March session with reporters.

Cluley isn't sure that won't happen again. He's telling his friends to just make up a birth date on Facebook from now on.

More about Sophos, CA
Market Place

Computerworld Member Login


 

Prioritizing Services with IT Service Management (ITSM)

Computerworld Live Webinar
Wednesday 20th, August 2008
11:00am EST (Sydney, Australia)

To be repeated on:

Thursday 4th, September 2008
11:00am EST (Sydney Australia)

Sign up and receive a free copy of The Forrester WaveTM Service Desk Management Tools, Q2 2008 at the conclusion of the Webinar.

Attend and discover:

  • How to deliver value to your business through ITSM
  • Best practice ITSM implementation
  • Why emphasis is changing from optimizing IT management processes to better servicing customers and demonstrating real dollar value
  • If service-oriented ITSM is best for your business
Whitepaper

Did you GET the memo? Getting you from Web 1.0 to Web 2.0 Security

Enterprises have forged ahead with the rapid evolution from Web 1.0 to Web 2.0 without addressing the inherent security risks. It is imperative for organisations to continue to embrace new technologies to survive, but security must shift from being an after thought to a primary consideration. Read on to find out more.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links