New Facebook Breach: 1.3M Links to Private Accounts

But company rep says they plugged the hole
By Neal Colgrass,  Newser Staff
Posted Nov 3, 2012 1:59 PM CDT
New Facebook Breach: 1.3M Links to Private Accounts
The Facebook logo.   (AP Photo/Craig Ruttle, File)

You know those emails Facebook sends you with a direct link to your account? Imagine 1.3 million of those links becoming available online, and you understand the massive security loophole that Facebook says it plugged yesterday, BBC reports. How the links ended up online isn't clear, but a message posted on Hacker News included a search string that brought them all up on Google. And some of them didn't require a password to enter the account.

Many of the links connected to throwaway mail sites or services that protected their email archives poorly—which would explain how they ended up online, says Facebook engineer Matt Jones. "Regardless ... we've turned the feature off until we can better ensure its security," he wrote. Just last week, a Bulgarian blogger said he bought info on 1.1 million Facebook users online for just $5—but a Facebook rep says that incident seems unrelated to the latest breach, the New York Times reports. (More Facebook stories.)

Get the news faster.
Tap to install our app.
X
Install the Newser News app
in two easy steps:
1. Tap in your navigation bar.
2. Tap to Add to Home Screen.

X