Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Cyris

121 posts

Master Geek
+1 received by user: 3


#78858 9-Mar-2011 17:13
Send private message

Hey guys,

Just wanted to warn you on something that seems to be spreading rapidly fast.

It seems hackers figured out how to post to your Facebook profiles by you accidentally visiting their malicious website, there's no apps, there's no permissions, if you're logged into Facebook and click on their website it will post to your Facebook, I suspect it has something to do with your browser cookies. I'm going to research this and write up a blog post explaining it and how to protect yourself against it.

So don't go clicking on any dodgy looking videos posted by your friends on Facebook, or visit any malicious links.

If you do accidentally fall for it, make sure to visit your Facebook profile immediately and check to see if anything is posted to your wall, if it is then click the little cross that appears on the top right of the post "Remove AND Unlike"

I'll update this post with more details when I do some more research into this.

[Moderator edit (MF): moved to other forum]

 

Create new topic
oldmaknz
536 posts

Ultimate Geek


  #447021 9-Mar-2011 17:33

[citation needed]



Regs
4066 posts

Uber Geek
+1 received by user: 206

Trusted
Snowflake

  #447022 9-Mar-2011 17:36
Send private message

i *think* that if you are using Internet Explorer and you add facebook.com to your trusted sites, any other sites that are out of the trusted list which try to post to facebook.com will fail.

if you can reproduce the 'hack', then give that a go and see if it mitigates it.




Cyris

121 posts

Master Geek
+1 received by user: 3


  #447035 9-Mar-2011 18:01
Send private message

Turning on SSL seems to have stopped the one malicious website but not the other.

As far as I can make out, it's Javascript that is initiating the whole "Like and Posting" on your Facebook wall.



Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.