Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Facebook fixes 'Peeping Tom' webcam bug - AFTER 5 MONTHS

iComp (2523194) writes | about a year ago

Facebook 0

iComp writes "Facebook had a busy time over the holiday period fixing several security flaws, including a webcam-related vulnerability that allowed hackers to record video from a user's web camera and post it on their timeline.

"An attacker could trick a user to silently record his webcam video and publish it to his Facebook wall, without the user even knowing about it," according to Aditya Gupta, the Indian security researcher who discovered the flaw. Gupta and fellow security researcher Subho Halder from XY Security earned a $2,500 reward from Facebook for discovering the Cross-Site Request Forgery (CSRF) bug, which stemmed from a failure to apply adequate security controls. Gupta notified Facebook about the "Peeping Tom" bug in July but the social networking giant only recently rolled out a fix.

A video by XY Security illustrating the resolved webcam vulnerability can be found here."

Link to Original Source

cancel ×

0 comments

Sorry! There are no comments related to the filter you selected.

Check for New Comments
Slashdot Login

Need an Account?

Forgot your password?

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>