Summary: A flaw in Facebook allows users to access private photos that are hidden from view, through no less than the social network's own image reporting tool. 
  
 Update: Facebook acknowledges the flaw, and fixes the bug. 
  
 'Report abuse' features in Facebook give users access to personal, private and hidden photos that would normally be hidden from view. 
  
 The flaw, spotted by members of a body building forum, no less, allows Facebook users to access photos revealed by the report abuse tool. 
  
 Only a handful of images are presented to the user as part of the 'report' feature, which is used by Facebook to maintain decency and remove harmful images, posts or content. 
  
 Here's how it works: 
  
 Users are able to report "inappropriate profile photos" on a user's profile. By checking the box "nudity or pornography," the user is granted an opportunity to help Facebook "take action by selecting additional photos to include with your report." Facebook will then display a number of additional photos that are not otherwise publicly available to the user. 
  
 Photos (such as the one below) were taken directly from Mark Zuckerberg's private photo collection on his profile and posted. Ed note: We debated the photo selection and whether to run one at all. We initially posted the Obama-Zuckerberg and then went with a dinner party. We flipped back to the picture with the most public figures. Ultimately, we decided running the picture made sense. 
  
 (Source: "Mark Zuckerberg", Facebook) 
  
 This flaw appears to expose private photos of any person on Facebook. We tried this out for ourselves: Sometimes, private photos were exposed; others times they weren't. 
  
 Members of the forum also posted onto an image sharing website some of of Zuckerberg's private Facebook photos, which are normally inaccessible from public viewing. 
  
 The forum explored a number of the flaw's details. For example, private photos that are hidden or inaccessible to people who are friends, can not only be accessed but can be enlarged to their full scale. 
  
 Some browsers restrict this flaw. 
  
 One thing to note: Exploiting this flaw requires reporting a Facebook member. 
  
 But this flaw is open for anyone to use -- and abuse. While Facebook anonymises the data that it gets through this reporting tool, the user whose profile pictures can be viewed will not know that their privacy has been invaded. 
  
 Update: Facebook issued this statement a short time ago: 
  
 "Earlier today, we discovered a bug in one of our reporting flows that allows people to report multiple instances of inappropriate content simultaneously. 
  
 The bug, was a result of one of our most recent code pushes and was live for a limited period of time. Not all content was accessible, rather a small number of one's photos. Upon discovering the bug, we immediately disabled the system, and will only return functionality once we can confirm the bug has been fixed." 
  
 Facebook added that the privacy of our user's data is a top priority for the company, and Facebook invests lots of resources in protecting our site and the people who use it. 
  
 Related: ||||| A Facebook security hole that allows you to view, save and share private photos has enabled one hacker to expose those of Mark Zuckerberg. 
  
 The method requires you to first locate the person you want to view photos of, then report a photo as nudity or pornography. From there, check Report to Facebook and click continue. Facebook will then give you the option to help them take action by selecting additional photos to include in the report, which then gives you access to the user's private photos. 
  
 Facebook has received an enormous amount of criticism lately for its privacy practices . In November, Facebook settled with the Federal Trade Commission over its failure to keep its privacy promises and Zuckerberg admitted that Facebook "made a bunch of mistakes." 
  
 "With each new tool, we've added new privacy controls to ensure that you continue to have complete control over who sees everything you share," Zuckerberg wrote to Facebook users in November. "Because of these tools and controls, most people share many more things today than they did a few years ago." 
  
 Now with everyday users able to access private photos, it brings up the question of, once again, how safe is it to upload your information and photos to Facebook, even if you have strict privacy settings enforced? 
  
 "This shows that Facebook has no robust security model at all," raphman, who is a PhD student, writes on Hacker News . "Either they do not have any mandatory access control for private data, or someone approved of circumventing such access control measures for this feature. Both is in my opinion inacceptable for a company holding so much potentially sensitive data." 
  
 As the blog with the images of Zuckerberg states, "It's time to fix those security flaws facebook..." 
  
 With Facebook under watch by the FTC for the next 20 years, we wonder what effect this will have on the social network considering that for every violation, the FTC could charge up to $16K. 
  
  
  
 [UPDATE 12/13/11 at 9:15am: Facebook is now suggesting that you enable secure browsing to help protect account from hackers. ][ UPDATE 11:52am PT: ] Facebook has ackowledged the bug that allowed users to access private photos and is currently fixing the bug. A Facebook spokesperson told ZDnet that the bug "was discovered in one of our reporting flows" that let users report several instances of inappropriate images or posts. Facebook also reaffirmed its commitment to data privacy, stating it as a "top priority" for the company. ] |||||
What is a one-paragraph summary of the above article?
– A temporary glitch allowed Facebook users to view others' private photos with a surprisingly easy trick, reports ZDNet. It's been fixed, but not before some of Mark Zuckerberg's own private photos got pilfered and reposted on blogs, like here at Launch. The trick: You could report an image to Facebook as inappropriate and mark the "nudity or pornography" box (even if it wasn't). At that point, Facebook would give you access to other photos in the user's private stream so you could check for more to flag. Facebook announced this afternoon that it fixed the problem, notes Gizmodo. "Earlier today, we discovered a bug in one of our reporting flows that allows people to report multiple instances of inappropriate content simultaneously," it said, calling the glitch "the result of one of our recent code pushes." The system has been disabled.
Sammanfattning: En brist i Facebook gör det möjligt för användare att få tillgång till privata foton som är dolda ur sikte, genom inte mindre än det sociala nätverkets eget bildrapporteringsverktyg. Uppdatering: Facebook bekräftar felet, och fixar felet. "Rapportera missbruk" funktioner i Facebook ger användare tillgång till personliga, privata och dolda bilder som normalt skulle döljas från vyn. Bristen, upptäckt av medlemmar av en kropp byggnad forum, inte mindre, tillåter Facebook-användare att komma åt bilder avslöjade av rapporten missbruk verktyg. Endast en handfull bilder presenteras för användaren som en del av funktionen "rapport", som används av Facebook för att upprätthålla anständighet och ta bort skadliga bilder, inlägg eller innehåll. Så här fungerar det: Användare kan rapportera "olämpliga profilbilder" på en användares profil. Genom att kryssa i rutan "nuddighet eller pornografi" ges användaren en möjlighet att hjälpa Facebook "vidta åtgärder genom att välja ytterligare bilder att inkludera med din rapport." Facebook kommer då att visa ett antal ytterligare foton som annars inte är allmänt tillgängliga för användaren. Foton (som den nedan) togs direkt från Mark Zuckerbergs privata fotosamling på hans profil och lades upp. Ed anm.: Vi diskuterade fotovalet och om man skulle köra ett alls. Vi postade Obama-Zuckerberg och gick sen på middag. Vi vände tillbaka till bilden med de mest offentliga personer. Till slut bestämde vi oss för att sköta bilden. (Källa: "Mark Zuckerberg", Facebook) Denna brist verkar avslöja privata bilder av någon person på Facebook. Vi prövade detta själva: Ibland avslöjades privata foton; andra gånger var de inte det. Medlemmar i forumet lade också upp några av Zuckerbergs privata Facebook-bilder på en bilddelningswebbplats, som normalt är otillgängliga från offentlig visning. Forumet utforskade ett antal av bristernas detaljer. Till exempel kan privata foton som är dolda eller otillgängliga för människor som är vänner, inte bara nås utan kan förstoras till sin fulla skala. Vissa webbläsare begränsar denna brist. En sak att notera: Utnyttja denna brist kräver att rapportera en Facebook-medlem. Men denna brist är öppen för vem som helst att använda -- och missbruk. Medan Facebook anonymiserar data som den får genom detta rapporteringsverktyg, kommer användaren vars profilbilder kan ses inte veta att deras integritet har invaderats. Uppdatering: Facebook utfärdade detta uttalande för en kort tid sedan: "Tidigare idag upptäckte vi ett fel i ett av våra rapporteringsflöden som gör det möjligt för människor att rapportera flera fall av olämpligt innehåll samtidigt. Buggen, var ett resultat av en av våra senaste code pushes och var live under en begränsad tid. Allt innehåll var inte tillgängligt, snarare ett litet antal av ens foton. När vi upptäckte felet, inaktiverade vi omedelbart systemet, och kommer bara att returnera funktionaliteten när vi kan bekräfta att felet har rättats." Facebook tillade att integriteten i vår användares data är en högsta prioritet för företaget, och Facebook investerar massor av resurser för att skydda vår webbplats och de människor som använder den. Related: Ett Facebook-säkerhetshål som gör att du kan visa, spara och dela privata foton har gjort det möjligt för en hackare att exponera dem av Mark Zuckerberg. Metoden kräver att du först lokaliserar den person du vill visa foton av, sedan rapporterar ett foto som nakenhet eller pornografi. Därifrån, kontrollera Rapport till Facebook och klicka på fortsätta. Facebook ger dig då möjlighet att hjälpa dem att vidta åtgärder genom att välja ytterligare foton att inkludera i rapporten, vilket då ger dig tillgång till användarens privata foton. Facebook har fått en enorm mängd kritik på sistone för sin integritet praxis. I november gjorde Facebook upp med Federal Trade Commission över dess misslyckande med att hålla sina sekretesslöften och Zuckerberg medgav att Facebook "gjorde en massa misstag." "Med varje nytt verktyg har vi lagt till nya integritetskontroller för att säkerställa att du fortsätter att ha fullständig kontroll över vem som ser allt du delar med dig av", skrev Zuckerberg till Facebookanvändare i november. "På grund av dessa verktyg och kontroller delar de flesta människor många fler saker idag än de gjorde för några år sedan." Nu när vanliga användare har tillgång till privata foton, tar det upp frågan om, återigen, hur säkert är det att ladda upp din information och foton till Facebook, även om du har strikta sekretessinställningar? "Detta visar att Facebook inte har någon robust säkerhetsmodell alls", skriver raphman, som är doktorand, på Hacker News. "Antingen har de ingen obligatorisk åtkomstkontroll för privata data, eller någon som har godkänt att kringgå sådana åtkomstkontrollåtgärder för denna funktion. Båda är enligt min mening oacceptabla för ett företag som innehar så mycket potentiellt känsliga data." Som bloggen med bilderna av Zuckerberg säger, "Det är dags att åtgärda dessa säkerhetsbrister facebook..." Med Facebook under bevakning av FTC under de kommande 20 åren, undrar vi vilken effekt detta kommer att ha på det sociala nätverket med tanke på att för varje överträdelse, FTC kan ta upp till $ 16K. [UPDATERA 12/13/11 kl 9:15: Facebook föreslår nu att du aktiverar säker surfning för att skydda kontot från hackare. ][ UPPDATERING 11:52am PT: ] Facebook har ackowledged bugg som tillät användare att komma åt privata bilder och för närvarande rättar felet. En Facebook talesperson berättade för ZDnet att felet "upptäcktes i ett av våra rapporteringsflöden" som låter användare rapportera flera fall av olämpliga bilder eller inlägg. Facebook bekräftade också sitt engagemang för datasekretess, och angav det som en "översta prioritet" för företaget. ] Vad är en sammanfattning av ovanstående artikel?
Summary: A flaw in Facebook enables users to access private photos hidden from view, through no less than the social network's own image reporting tool. Update: Facebook confirms the error, and fixes the error. "Report Abuse" features in Facebook allow users access to personal, private and hidden images that would normally be hidden from the view. The lack, detection of members of a body building forum, no less, allows Facebook users to access images revealed by the report misuse tool. Only a handful of images are presented to the user as part of the "report" feature, which is used by Facebook to maintain decency and remove malicious images, posts or content. How it works: Users can report "inappropriate profile images" on a user's profile. By ticking the "nudity or pornography" box, the user is given an opportunity to help Facebook "take action by selecting additional images to include with your report." Facebook will then display a number of additional photos that are not otherwise publicly available to the user. Photos (such as the one below) were taken directly from Mark Zuckerberg's private photo collection on his profile and posted. Ed Note: We discussed the photo selection and whether to run one at all. We posted Obama-Zuckerberg and then went to dinner. We turned back to the picture with the most public figures. Finally, we decided to take care of the picture. (Source: "Mark Zuckerberg", Facebook) This flaw seems to reveal private images of any person on Facebook. We tried this ourselves: Sometimes private photos were revealed; other times they were not. Members of the forum also posted some of Zuckerberg's private Facebook images on an image-sharing website, which is normally unavailable from public viewing. The Forum explored a number of the details of the shortcomings. For example, private photos that are hidden or inaccessible to people who are friends can not only be accessed but can be enlarged to their full scale. Some browsers limit this flaw. One thing to note: Utilizing this flaw requires reporting a Facebook member. But this flaw is open to anyone to use -- and abuse. While Facebook anonymizes the data it receives through this reporting tool, the user whose profile images can be seen will not know that their privacy has been invaded. Update: Facebook issued this statement a short time ago: "Previously today, we discovered an error in one of our reporting flows that allows people to report multiple cases of inappropriate content at the same time. The bug, was a result of one of our latest code pushes and was live for a limited time. Not all content was available, rather a small number of one's photos. When we discovered the error, we immediately disabled the system, and will only return the functionality when we can confirm that the error has been fixed." Facebook added that the integrity of our user's data is a top priority for the company, and Facebook invests lots of resources to protect our website and the people who use it. Related: A Facebook security hole that allows you to view, save and share private photos has enabled a hacker to expose them by Mark Zuckerberg. The method requires you to first locate the person you want to view photos of, then report a photo as nudity or pornography. From there, check Report to Facebook and click Continue. Facebook then gives you the opportunity to help them take action by selecting additional photos to include in the report, which will give you access to the user's private photos. Facebook has received a huge amount of criticism lately for its privacy practices. In November, Facebook settled with the Federal Trade Commission over its failure to keep its confidentiality promises and Zuckerberg admitted that Facebook "made a lot of mistakes." "With each new tool, we have added new privacy checks to ensure that you continue to have complete control over who sees everything you share," Zuckerberg wrote to Facebook users in November. "Because of these tools and controls, most people share many more things today than they did a few years ago." Now that ordinary users have access to private photos, does it raise the issue of, again, how safe is it to upload your information and photos to Facebook, even if you have strict privacy settings? "This shows that Facebook has no robust security model at all," writes raphman, who is a PhD student, on Hacker News. "either they have no mandatory access control for private data, or anyone who has authorized to circumvent such access control measures for this function. Both are, in my opinion, unacceptable to a company that holds so much potentially sensitive data." As the blog with the pictures of Zuckerberg says, "It's time to fix these security flaws facebook..." With Facebook under surveillance of the FTC over the next 20 years, we wonder what effect this will have on the social network given that for every breach, the FTC can take up to $16K. [UPDATE 12/13/11 at 9:15: Facebook now suggests that you enable secure browsing to protect your account from hackers. ][ UPDATE 11:52am PT: ] Facebook has achowled bug that allowed users to access private images and currently fixes the bug. A Facebook spokesperson told ZDnet that the error was "discovered in one of our reporting feeds" that allows users to report multiple cases of inappropriate images or posts. Facebook also confirmed its commitment to data confidentiality, and indicated it as a "top priority" for the company. ] What is a summary of the above article?
– Ett tillfälligt fel gjorde att Facebook-användare kunde se andras privata bilder med ett förvånansvärt enkelt trick, rapporterar ZDNet. Det är fixat, men inte innan några av Mark Zuckerbergs egna privata foton blev stulna och postade på bloggar, som här på Launch. Tricket: Man kunde rapportera en bild till Facebook som olämplig och markera rutan "nuddighet eller pornografi" (även om det inte var det). Vid den tidpunkten skulle Facebook ge dig tillgång till andra foton i användarens privata ström så att du kan kontrollera för mer att flagga. Facebook meddelade i eftermiddag att det åtgärdat problemet, konstaterar Gizmodo. "Tidigare idag upptäckte vi en bugg i ett av våra rapporteringsflöden som gör det möjligt för människor att rapportera flera fall av olämpligt innehåll samtidigt", sade den, kallar felet "resultatet av en av våra senaste koddrivningar." Systemet är inaktiverat.
“A temporary error allowed Facebook users to see other people’s private images with a surprisingly simple trick,” reports ZDNet. It's fixed, but not before some of Mark Zuckerberg's own private photos were stolen and posted on blogs, like here at Launch. The trick: You could report an image to Facebook as inappropriate and check the box "nudity or pornography" (although it wasn't). At that point, Facebook would give you access to other photos in the user's private stream so you can check for more to flag. Facebook announced this afternoon that it fixed the problem, notes Gizmodo. "Previously today, we discovered a bug in one of our reporting feeds that allows people to report multiple cases of inappropriate content at the same time," it said, calling the bug "the result of one of our latest code drives." System's disabled.