Facebook's New Buy Had Huge Security Hole

Face.com app's flaw allowed Facebook, Twitter hijacking
By Rob Quinn,  Newser Staff
Posted Jun 20, 2012 10:14 AM CDT
Facebook's New Buy Had Huge Security Hole
A researcher found a major problem with Face.com, Facebook's latest acquisition.   (slatester)

(Newser) – Facebook has made a new acquisition, snapping up Israeli facial recognition firm Face.com in a deal believed to be worth up to $100 million. But while Face.com's technology—which is already used to auto-tag photos on Facebook—has plenty of fans, its KLIK mobile app had a major security flaw that has only just been fixed. The app stored Facebook and Twitter tokens insecurely, making it possible for anybody to hijack a user's accounts and gain access to their private photos and post updates as the user.

story continues below

The security flaw was spotted by an independent security researcher, who made sure it had been fixed before making his findings public. The problems shows that "users should be aware," writes David Kravets at Wired. "Anytime you grant access to your Facebook, Google or Twitter accounts to an outside app, there’s always a hazard that your accounts could be at risk. Today might be a good day to go review which apps you have given permissions to, and which you no longer use." (Read more Face.com stories.)

We use cookies. By Clicking "OK" or any content on this site, you agree to allow cookies to be placed. Read more in our privacy policy.
Get the news faster.
Tap to install our app.
Install the Newser News app
in two easy steps:
1. Tap in your navigation bar.
2. Tap to Add to Home Screen.