That’s not good. Tighten up your security, Facebook!
Symantec, a computer protection software company, has reported that for several years nearly 100,000 Facebook apps have been leaking access codes belonging to millions of users’ profiles.
The company claims an app security flaw may have given advertisers and other third parties access to Facebook users’ profiles.
Facebook is denying this claim, but Symantec wrote in a report:
“We estimate that as of April 2011, close to 100,000 applications were enabling this leakage. We estimate that over the years, hundreds of thousands of applications may have inadvertently leaked millions of access tokens to third parties.”
Facebook recently released a statement on the controversial report, reading:
“We appreciate Symantec raising this issue and we worked with them to address it immediately. Unfortunately, their resulting report has a few inaccuracies. Specifically,we’ve conducted a thorough investigation which revealed no evidence of this issue resulting in a user’s private information being shared with unauthorized third parties. In addition, this report ignores the contractual obligations of advertisers and developers which prohibit them from obtaining or sharing user information in a way that violates our policies. Finally, the change we announced today on our developer blog http://bit.ly/mebicS removes the outdated API referred to in Symantec’s report.”
The social networking site announced on Tuesday the app flaw has been patched, while Symantec is still recommending users change their passwords immediately.
Do U trust Facebook or have U already changed your password?
P.S. CLICK HERE to “like” Perez on Facebook!
P.P.S. CLICK HERE to “follow” Perez on Twitter