Classic Meta ;) Meta Muse ain't Kawaii btw!

all 5 comments

sorted by: hot top controversial new old
[–] 24 points 2 weeks ago

The best way to not have your private information leaked by AI is to not use it.

Join me next week for more cybersecurity tips

  • source
  • [–] 8 points 2 weeks ago

    This isn’t even regular Facebook casual abuse of user data.

    This is just straight up slop coded failure to even consider security.

  • source
  • [–] 3 points 2 weeks ago (2 children)

    The source article does a much better job explaining. It doesn't seem like the author of this article understood what they were describing.

    Apparently, the problem is that all you need to know to access the shared data is the DNS hostname, and the DNS hostname is intentionally shared with third-party DNS resolvers and unintentionally published through services that collect unsecured DNS requests. It kind of makes sense that you would want to put the shares on different DNS domains because they're different browser security origins and that makes it more difficult for cross site scripting, and then if the DNS domain already uniquely identifies the share, why put something more in the path? But putting a required unique value in the path would have prevented this because the path is sent encrypted to Facebook's servers only.

  • source
  • hideshow 2 child comments
  • [–] 3 points 2 weeks ago* (last edited 2 weeks ago) (1 child)

    I still don't get it. Was there just a publicly available cache of "shares" for each user, with zero security behind it?

    Edit: Oh wait, were the DNS resolvers themselves the "cache", because the geniuses put the conversation id in the subdomain?

  • source
  • parent
  • hideshow 1 child comment
  • 4 comments in c/privacy@lemmy.ml view that post
    [–] 17 points 2 weeks ago (1 child)

    This is the kind of top notch work I expect from Facebook employees. Or AI. Probably AI, let's be honest.

  • source
  • hideshow 1 child comment
  • [–] 13 points 2 weeks ago

    looks around

    Anyone? Nobody? No one...surprised?

    Thought so.

  • source
  • [–] 3 points 2 weeks ago

    No shit......

  • source
  • 2 comments in c/worldnews@lemmy.ml view that post
    [–] 2 points 2 weeks ago

    It also looks like they just stole the mascot design from the game Fall Guys

  • source
  • ...to someone other than Meta, I assume?

    It already has access to all your personal info in order to work.

  • source
  • 1 comment in c/privacy@programming.dev view that post
    [–] 2 points 2 weeks ago

    Maaan, they're gonna feed those leopards to death at this rate.

  • source