Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Facebook 'Stalker' Tool Uses Graph Search For Data Mining

Soulskill posted 1 year,6 days | from the at-least-somebody-finds-it-useful dept.

Facebook 38

angry tapir writes "Mining small details from Facebook has become even easier with Graph Search, the site's new search engine that returns personalized results from natural-language queries. Graph Search granularly mines Facebook's vast user data: where people have visited, what they like and if they share those same preferences with their friends. 'FBStalker' is a Python script debuted at the Hack in the Box security conference in Kuala Lumpur. In its current form, FBStalker runs in the Chrome browser on OS X, entering queries into Facebook's Graph Search and pulling data. Even if a person's profile is locked down to strangers, their friends' open profiles can be examined, giving an indication, for example, who the person may be close with. FBStalker uses Graph Search to find photos in which two people are tagged in, comments on profiles and more."

Sorry! There are no comments related to the filter you selected.

isn't this like the n:th bot for querying it? (2)

gl4ss (559668) | 1 year,6 days | (#45163945)

I mean seriously how many times can you flog the subject.

Re:isn't this like the n:th bot for querying it? (1)

Anonymous Coward | 1 year,6 days | (#45164197)

Oh, if only FB were a dead horse.

Spear phishing (1)

schneidafunk (795759) | 1 year,6 days | (#45163999)

So based on the article, the lesson learned is do not give your tech-novice wife a computer with your passwords on it.

Re:Spear phishing (4, Insightful)

barlevg (2111272) | 1 year,6 days | (#45164317)

Probably should take computers away from your tech-novice parents, grandparents, children and cats as well (though why you gave your cat a computer in the first place is beyond me). The point of the article is not that spear phishing is new, it's that Graph Search makes it much easier to find a squishy target for your spear.

Re:Spear phishing (1)

schneidafunk (795759) | 1 year,6 days | (#45164417)

Meh, this is a targeted attack on a "high-profile public figure". Google or his garbage would probably turn up the same result. Granted, it sounds like their approach was the easiest.

Re:Spear phishing (0)

Anonymous Coward | 1 year,6 days | (#45165021)

...cats as well (though why you gave your cat a computer in the first place is beyond me).

I know - because the keyboard is *the* place a cat likes to sit (especially if you're using it)!

Re:Spear phishing (1)

just_another_sean (919159) | 1 year,6 days | (#45166115)

(though why you gave your cat a computer in the first place is beyond me)

Cause it's just so damn cute [grumpycatpics.com] !

Re:Spear phishing (0)

Anonymous Coward | 1 year,6 days | (#45165599)

So based on the article, the lesson learned is do not give your tech-novice wife a computer with your passwords on it.

The lesson is more like: do not give your tech-novice wife a smartphone.

Good luck with that!

It's a trap! (1)

koan (80826) | 1 year,6 days | (#45164159)

I've noticed one news site that only allows log in via "verified" Facebook accounts, if you really care about topics like privacy, security, then you would close your Facebook account.

Re:It's a trap! (1)

Registered Coward v2 (447531) | 1 year,6 days | (#45164513)

I've noticed one news site that only allows log in via "verified" Facebook accounts, if you really care about topics like privacy, security, then you would close your Facebook account.

Why? Attila T. Hun has always liked a bit of notoriety and FB just expands its reach.

Runs only in Chrome on OSX (0)

Anonymous Coward | 1 year,6 days | (#45164335)

It's python. Why can't it be written platform agnostic?

Re:Runs only in Chrome on OSX (1)

Anonymous Coward | 1 year,6 days | (#45164383)

It's python. Why can't it be written platform agnostic?

I'm sure it can. But it's always better to focus on one platform when trying to meet a deadline, especially for a demo at an international event.

Re:Runs only in Chrome on OSX (0)

Anonymous Coward | 1 year,6 days | (#45165481)

And it's hard to complain when the code is on github. Port away if you care enough.

Facebook != Privacy (0)

Anonymous Coward | 1 year,6 days | (#45164339)

Nothing is private on FB even if you lock everything down. And don't forget they create 'shadow profiles' on all users to gather personal information that you don't enter into FB (they know that you really meant to share that data with them but just forgot or were too busy).

Moving goalposts (0)

Anonymous Coward | 1 year,6 days | (#45164527)

Facebook privacy, indeed all internet privacy seems to be a moving goalpost...whenever the site wants to change it for whatever reason.

I know this, Slashdotters know this...but does little Timmy know that? 15 years from now what dirt will potential empoyers find on him? And the only real line of defense is his parents...who probably know less than Timmy.

The speed of tech progress and privacy knowledge are severely out of sync...and not in privacy's favor.

What if one has no FB ? (0)

Anonymous Coward | 1 year,6 days | (#45164559)

Can they gather information on someone who don't have and never had a FB account ?

Has a friend posted a picture of you? (3, Insightful)

Anonymous Coward | 1 year,6 days | (#45164685)

If any friends took a snapshot of you and tagged you with your name, you're in the Matrix.

Re:What if one has no FB ? (2, Informative)

Anonymous Coward | 1 year,6 days | (#45164819)

Yes it's called a shadow profile I believe. They collect information about you based on your friends posts and they store it for when you're finally ready to sign up for their great service! http://www.digitaltrends.com/social-media/what-exactly-is-a-facebook-shadow-profile/

Re:What if one has no FB ? (0)

Anonymous Coward | 1 year,6 days | (#45164965)

Is there a way to find out if you have shadow profile (and what it contains) without getting an account?

Re:What if one has no FB ? (1)

Anonymous Coward | 1 year,6 days | (#45165067)

It's called "Discovery" and goes hand in hand with a Lawsuit and Lawyer against Facebook.

Re:What if one has no FB ? (0)

Anonymous Coward | 1 year,6 days | (#45165039)

Based on your link it seems that a shadow profile is some extra info FB stores for registered users.

Re:What if one has no FB ? (1)

cjjjer (530715) | 1 year,6 days | (#45165115)

Google also does this with your account profile information by scraping other social sites. I know this for a fact because other than my username I have never (nor had a reason to) view / edit my account profile. With the latest use your Google+ image / Name in ads uprising I checked out my account profile and was shocked that it had all the info from my LinkedIn profile as well info from my twitter account populated.

FYI: The only service I use from Google is mail and I have never used service interoperability between any social account and Google.

Re:What if one has no FB ? (0)

Anonymous Coward | 1 year,6 days | (#45165303)

I did not register Google+ either, only gmail and gdrive.

If I remember well, I had to optout of some new google feature, 3-4 years ago or so, related to what is g+ now.
Maybe you didn't.

Re:What if one has no FB ? (3, Informative)

gl4ss (559668) | 1 year,6 days | (#45165465)

If I remember well, I had to optout of some new google feature, 3-4 years ago or so, related to what is g+ now.
Maybe you didn't.

google has pushed g+ a lot.

if you're not on g+, then there's a lot of ways you can join by one clicking by accident. iirc gtalk was turned into g+ too. if you have a youtube account then you're on g+ now("upgrade account" click).

if you're not seeing g+ spam on gdrive and gmail then you might want to check again if you already have a g+ account.

Re:What if one has no FB ? (0)

Anonymous Coward | 1 year,6 days | (#45165687)

If you're not seeing g+ spam on gdrive and gmail then you might want to check again if you already have a g+ account.

Well... when I select google+ on the applications shortcuts, from gmail screen, it tells me "join Google+ by creating your public profile" (my translation)
It's the first step to join g+, over three steps displayed on the left. Page title is "configure your profile".

So I hope I don't have a g+ account.

Re:What if one has no FB ? (1)

flimflammer (956759) | 1 year,6 days | (#45166385)

if you have a youtube account then you're on g+ now("upgrade account" click).

Not me. I've been very proactive about avoiding G+ (not on privacy grounds primarily but because I have no interest in having pointless social network profiles floating around). My youtube account isn't associated with a G+ account at all.

Maybe it's because my Google account is essentially tied to their domain services and I have all G+ stuff disabled on their dashboard. Trying to go to G+ at all presents me with a nice "Google+ is not available for your organization" message.

Re:What if one has no FB ? (0)

Anonymous Coward | 1 year,5 days | (#45179143)

Linked In raids any accounts it can find on your device.

yay (0)

Anonymous Coward | 1 year,6 days | (#45164949)

Fuck Facebook.

Just goes to show you (1)

Anonymous Coward | 1 year,6 days | (#45164977)

Facebook's "privacy controls" are nothing of the sort because they do not allow you control of your information when that information is found on other people's profiles. Kind of a microcosm of the government's third party doctrine if you ask me.

Re:Just goes to show you (1)

Anonymous Coward | 1 year,6 days | (#45165071)

they do not allow you control of your information when that information is found on other people's profiles

By definition, if it's on someone else's profile then it's not your information, even it if is about you. Go bitch at the person who put it up there if you have a problem with it.

Re:Just goes to show you (1)

gl4ss (559668) | 1 year,6 days | (#45165495)

how could it? this isn't some world-wide-uk where everyone is celebs and have legal means to shutdown everyone talking about them.

if you don't want to be mentioned anywhere don't be friends with anyone. don't ever go anywhere.

even then though probably someone would talk about you as the creepy guy who never goes anywhere.

as to the presentation.. the guy could have saved everyones time and just linked to facebooks graph search pr.

a bit from the article that caught my eye (2)

way2trivial (601132) | 1 year,6 days | (#45165701)

""It's basically not feasible for a human to go to the depths that FBStalker script does," he said."

Pfft-- I beg to differ...

Already said... (3, Insightful)

just_another_sean (919159) | 1 year,6 days | (#45166069)

Already said a million times or more but *this* is why I am not on Facebook.

Oh wait, I probably am and just don't know it thanks to my "friends". So I guess what I should have said is "this is why I hate Facebook"!

Re:Already said... (1)

isorox (205688) | 1 year,6 days | (#45167887)

Already said a million times or more but *this* is why I am not on Facebook.

Oh wait, I probably am and just don't know it thanks to my "friends". So I guess what I should have said is "this is why I hate Facebook"!

Precisely, you're probably better being on facebook with a locked down profile that you never add, perhaps with some fake photos, than you are ignoring it completely.

Or you can go with the herd. In nature a lone deer is often killed, while the herd remains safe. Are you sure you're a wolf?

Re:Already said... (1)

antdude (79039) | 1 year,6 days | (#45171313)

Yeah, that's scary. I registered for a brand new account. Facebook only has my e-mail address and name, but they already had connections to people I know. How the heck? I wished I could know more how it has connections to others. Did people name me? I asked people through other communication means, and they said no. WTF? With my fake accounts, I do not see anyone. It's scary! :(

Does the code even run? (0)

Anonymous Coward | 1 year,6 days | (#45169435)

For all this arguing... has anyone actually run this code? Indentation is all off and AttributeError's glaore.

'Module' object has no attribute 'adapters' line 32. Anyone getting this thing to run successfully?

How to run the script? (0)

Anonymous Coward | 1 year,6 days | (#45172995)

Anyone get this to run? No luck on MAC OS X 10.8.5 with Python 2.6......

creepy - A geolocation information aggregator (0)

Anonymous Coward | 1 year,6 days | (#45173029)

for Linux and Windows:

creepy - A geolocation information aggregator (Linux+Windows)

http://ilektrojohn.github.io/creepy/ [github.io]
http://ilektrojohn.github.io/creepy/faq.html [github.io]

"creepy is an application that allows you to gather geolocation related information about users from social networking platforms and image hosting services. The information is presented in a map inside the application where all the retrieved data is shown accompanied with relevant information (i.e. what was posted from that specific location) to provide context to the presentation."

Features

Map providers available :

        Google Maps
        Virtual Maps
        Open Street Maps

Location information retieval from :

        Twitter's tweet location
                Coordinates when tweet was posted from mobile device
                Place (geographical name) derived from users ip when posting on twitter's web interface. Place gets translated into coordinates using geonames.com
                Bounding Box derived from users ip when posting on twitter's web interface.The less accurate source , a corner of the bounding box is selected randomly.
        Geolocation information accessible through image hosting services API
        EXIF tags from the photos posted.

Social networking platforms currently supported :

        Twitter
        Foursquare (only checkins that are posted to twitter)
        Gowalla (only checkins that are posted to twitter)

Image hosting services currently supported :

        flickr - information retrieved from API
        twitpic.com - information retrieved from API and photo exif tags
        yfrog.com - information retrieved from photo exif tags
        img.ly - information retrieved from photo exif tags
        plixi.com - information retrieved from photo exif tags
        twitrpix.com - information retrieved from photo exif tags
        foleext.com - information retrieved from photo exif tags
        shozu.com - information retrieved from photo exif tags
        pickhur.com - information retrieved from photo exif tags
        moby.to - information retrieved from API and photo exif tags
        twitsnaps.com - information retrieved from photo exif tags
        twitgoo.com - information retrieved from photo exif tags

Automatic caching of retrieved information in order to reduce API calls and the possibility of hiting limit rates.

GUI with navigateable map for better overview of the accumulated information

4 Maps providers (including Google Maps) to use.

Open locations in Google Maps in your browser

Export retrieved locations list as kmz (for Google Earth) or csv files.

Handling twitter authentication in an easy way using oAuth. User credentials are not shared with the application.

User/target search for twitter and flickr.

Check for New Comments
Slashdot Login

Need an Account?

Forgot your password?