Slashdot Mirror
Facebook Has Hosted Stolen Identities and Social Security Numbers for Years (vice.com)
Cybercriminals have posted sensitive personal information, such as credit card and social security numbers, of dozens of people on Facebook and have advertised entire databases of private information on the social platform, Motherboard reports. Some of these posts have been left up on Facebook for years, and the internet giant only acted on these posts after the publication told it about them. From the report: As of Monday, there were several public posts on Facebook that advertised dozens of people's Social Security Numbers and other personal data. These weren't very hard to find. It was as easy as a simple Google search. Most of the posts appeared to be ads made by criminals who were trying to sell personal information. Some of the ads are several years old, and were posted as "public" on Facebook, meaning anyone can see them, not just the author's friends. Independent security researcher Justin Shafer alerted Motherboard to these posts Monday.
Watch THE VIDEO that got a 20+ year Slashdotter BANNED from Slashdot!
I'll never forgive Facebook for acting as Russia's propaganda arm to elect Donald Trump.
By the way, anyone else getting those "History in Orbit" ads that are obvious Russian propaganda about their supposedly fearsome military.
Ok, you installed a treasonous puppet, but let's not get carried away here Vladimir...
So...if Google cached results that contained full SSNs and other PII, aren't they as culpable as well? (And I'd imagine they're still in there...)
It's a website where people post stuff. Literally trillions of posts over years.
What kind of magical spying powers do you think Facebook has?
I think it is time for more then just a public show of shamming in front of the Congress.
The best would be to decouple SSN from private lives and use it as it was intended to, just as your social security ID.
I would also add a requirement for any company to use up-to-date encryption standards when processing personal information and explicit permission of the mentioned when storing such information for longer then 'n' weeks (government agencies can be exempt from the explicit permission of course).
Some of these posts have been left up on Facebook for years, and the internet giant only acted on these posts after the publication told it about them.
Yes, Facebook depends on notifications to catch some illicit content. If they acted on those posts once notified, the system is working — except for the part where someone can use your SSN to get credit in your name. That part is broken, by design. However, that part isn't in Facebook.
You can play whack-a-mole with SSNs from now until eternity, or you can fix the credit problem, but you can't protect SSN's by playing whack-a-mole.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
I think its clear Facebook talks a good talk but is two faced in how it actually does business. Do you really think a Zuckerberg really cares? His lack of real action says volumes.
that suuport new faces and 8any achievements that
Why isn't anyone getting uptight over LinkedIN? They have our goddamn WORK history! Does anyone think that they aren't pimping out our data?
I remember having my profile looked at without ever seeing WHO looked at them. That was fucking creepy!
When an employer says they recruit from LinkedIN I pass them by - like GoodWill......
I 'canceled' my LinkedIN account and never had a facebook account. From what I've seen, that didn't make any difference.
We can keep pulling this thread... If I learned I could use the internet to find stolen CC numbers from Slashdot, then....
If facebook actively searches for this stuff, they can't hide behind safe harbor legislation that merely requires removal of stuff when notified.
It'a like having a rustic forest with widowmaker branches hanging up there. Once you start pulling them down, you're screwed, and have to do it repeatedly lest you get sued. If you had left it alone and some idiot wandered through and got killed, that's their problem.
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
Brian Krebs reported on this a week ago, and then followed up with another story about how attempting to report more of them was rebuffed.
Post their social for number feng shui and numerology.
I’m sure they’ve apologized and promised to do better.