How To Hack Facebook In 51 Seconds

Vasanth Sridharan | March 28, 2008 5:39 PM

hackers.jpgSo Byron Ng isn't a real Facebook hacker. But apparently it isn't hard to become one, if you've got any technical skills at all. Hacking Facebook is a cottage industry, with hundreds or thousands of unpaid workers beavering away. The video below shows how to monkey with your friends "Moods" app -- in less than 1 minute.

Right now the worst case-scenario for Facebook apps usually means someone's private photos get exposed -- and even the most gullible Facebook user there's no such thing as true privacy on the Web. (Right?) But as Facebook gets more ambitious -- see its upcoming PayPal-like currency -- that's going to change.

Is Facebook easier to hack than other sites of similar size? How about compared to other social networks? And if so, what should Zuckerberg & Co. do about it? Let us know in comments.

Subscribe to SAI: RSS, email newsletter (no spam)

More:

Share:
Post to Del.icio.us


< Prev. Story
Next Story >

57 Comments

hakd said:
Appears to use Limelight CDN

photos- .ll.facebook.com. 3600 IN
CNAME facebook-photos- .vo.llnwd.net.

No security set up on the image URLs on the cdn. Only secure is obfuscation of the #s in the URL, getting right combination. That's weak.

Relying on a cdn means harder to fix than self served.
Phil Freo (URL) said:
There is a big difference between hacking "Facebook" and hacking "a Facebook application". This guy does the latter only.
Ralph said:
This isn't a facebook hack at all. It's a Moods application hack. Really, it's the application programmer's fault for not checking if the auth_token received corresponds to the fb_sig_user. James Hong's Pets application used to have the same problem, where you could sell other people's items to make money for your own pet. He just needed to validate his inputs...

And so do most amateurs web programmers.

Facebook is secure. Its apps vary.
Peter Kafka (URL) said:
Ralph, I understand difference between Facebook and apps, but if Facebook apps aren't secure, doesn't that amount to the same thing? For instance, don't app-makers have access to FB personal data?
Ryan (URL) said:
Take a look at this post I wrote about five months ago on Facebook app security. It identifies the most common problems I saw when researching the FB app environment.

http://deftlabs.com/2007/10/facebook-application-security/
aimClear (URL) said:
One wonders exactly WHY FB won't release the 10,000 item PPC social gracph "inventory" to those buying social PPC. You would think there would be a tool for advertisers like us who spend significant dollars per month on behalf of clients.

Google shares the keyword inventory for AdWords. As a result, we buy more. FB wants the PPC portion of the social graph to be some sort of Ajax TAO experience, thereby limiting our ability to spend money on FB. Go figure... After a while that will change, as advertisers demand to know more about the "interest area" affinities they are buying.

Also, hacking a cheese-ass FB app is FAR from "hacking" FB. There are many layers of security to protect some layers of data. In fact, FB has actually CHANGED security methods over the last 2 weeks to protect some layers of social graph data, in light of scraper "provocation." Trust me, FB is aware and not much they don't want us to have is available.

If you can put it in a browser available to users for any purpose, it can be scraped. This is dependent ONLY on the commitment of the scraper in a game of interface cat and mouse.

This post, whilst fun and hyperbolic, doesn't tell us much accept that some are doing to FB what most gray hat SMOs have been doing forever...taking what data the community sites give us...aggregating the data to our clients' advantage, etc...

BTW, don't get caught violating the FB TOS in what you scrape friends...use the data for yourselves :)
stone said:
I remain a contrarian on facebook and don't think we'll be talking about them anymore in 51 months.
Nick5014 (URL) said:
Yeah bad programming on the app. I think apps that can be hacked like this dont deserve to be on sites like facebook to be honest.

Ah well now to go try it
mat (URL) said:
"This isn't a facebook hack at all. It's a Moods application hack. Really, it's the application programmer's fault for not checking if the auth_token received corresponds to the fb_sig_user. James Hong's Pets application used to have the same problem, where you could sell other people's items to make money for your own pet. He just needed to validate his inputs...

And so do most amateurs web programmers.

Facebook is secure. Its apps vary."

What? You are saying that facebook allows users to write a program that changes any user's mood but then you say it is the developer's fault for allowing people to changes other's mood. Wha-what? How is facebook secure again?
samsa said:
yo mat.. I believe people are saying 'https://facebook.com" is secure, the site itself is secure - its applications arent. The applications are built ON facebook and not integrated INTO it.

So we can mess with peoples stupid apps, big deal.. Unless someone can hack facebook's SECURITY system I dont see what the buzz is about hacking its api's. Its a waste of time unless your a teenager, then I guess its educational and/or entrepreneurial.

we can still see private albums and as far as Ive heard the rest is pretty secure with the exception of people clicking on phishing links in their emails..
Want-to-hack said:
I just wanna hack into a facebook account to ruin someone's reputation. I dont suppose thats possible???
Aiesh said:
I have a girl whu i liked since 11th grade she is in face book is there any way i can hack her profile and accpt my invitation........so i can knw abt her
rich said:
how can i few someones photos if they are not my friens
Marie Ann Wong Wy Lin said:
I created a folder which was suppose to be friends only. Some of which were nude topless shots of myself and a few female friends (all girls).

To my horror, everyone was able to see them. How could it be?!

These were visible to all!!!
paul wilson said:
Theres a girl ive liked for years on face book, now im a friend of her how can i read the e-mails shes sent through face book???
jimmy knox said:
You stalker,,
yo said:
HAHAHAHAHAHA... All of you are dumb.
jon said:
How do you view private albums through facebook?

I have heard that if you are not friends with the person, you can still message them and copy their friend code from the url, and go to your own or one of your friends profile and click on view pictures. Then you go to pictures added by other people, click one, and paste the friend code in the url.

I have tried it but there are a lot of different numbers in the url I don't know which one is the friend code.

Can someone please help me out?
jaymi said:
some one has hacked into my facebook account and has sent messages to all my friends on superwall telling them of a site u can get drugs from,i have deleted my wall and sent messages to all my friends sayin dont open link,what hurts is they sent it to a good friend who buried her brother today through drug taking,i dont do or condone drug takin but people will think i do,,,,,,please help me.
Vb.net said:
it simply tells us that facebook is vulnerable to scripts.
this can be a start for more hacking issues
aliasneo (URL) said:
you dumb ASSSSSSSSSSSSSS
Angel said:
help. trying to help a friend. her parents through her out of the home (more less since she didnt get straight A's in grade 10, took all her passwords for the facebook account and now contacting her friends, adding new friends etc. is there anyway for her either close her facebook account or better yet to somehow hack into it and get it back??? help please!
Jake (URL) said:
Here's an article about similar topic too...

http://www.danielpoon.com/lifehacking/2008/07/17/how-to-hack-a-facebook-account-part-2/

trentsteel said:
I know something is up because my non-hacker, not very computer-literate ex-girlfriend has found a way to look at mine an anyone else's profile page, including deleted posts, regardless of their security settings. I know this because she has been reporting things she couldn't possibly know about people not on her friends list.

I have changed my password so I know she's not using my account or anything.

She won't tell me how she does it.
Marie De Leo said:
I'm still so in love with my ex boyfriend...I want to hack into his facebook so I can get rid of his girlfriend. Help me please I'm desperate for him...
ford said:
Hi. I am a hacker. I can get you a password (aol, myspace, facebook, msn/hotmail,yahoo..etc). I do charge a fee for a password. Once i get the password i'll show you proof i have it. Are you interested? please email me at fordf202006@yahoo.com
jenna said:
i have been hacked..so has my 2 frndz....how do i hack thiz person bak...i wanna knoe how 2 hack her bak....she tried ruinin my reputation..i wanna get her bak!!!but how????
de sa cie said:
Do not worry your videos that can not playback on Mac now! wmv converter for mac is really the best solution for you . swf converter
IMVU credits (URL) said:
IMVU contains its own economy with a currency system based on IMVU credits.
gaia gold (URL) said:
In the rushed of days, we had the deep friendship, when he had gaia gold, he would buy equipment to me.
wowgolds987 (URL) said:
From wow gold the monster filled wow gold depths of Wailing cheap wow gold Caverns to the fanatic's cheap wow gold stronghold known as Scarlet buy wow gold Monestary, the buy wow gold world of Azeroth is a place of world of warcraft gold great danger world of warcraft gold and adventure. Whether fast wow gold you seek to unravel the machinations of free wow gold Onyxia.
dave said:
facebook is a load of old crap, if anyone wants a profile pic hack msg me, no problem. It's easy when ya know how, mabey I should charge for the info. Nah I'll give it away, took me and some buddies 4hrs to figure it out.
Dave said:
How do you get a facebook page killed if someone hacks and steals your account?
Archlord money (URL) said:
I know a lot of boys loved her, they gave her Archlord money, she accepted all the gifts.
Buy 2moons dil (URL) said:
I carefully studied the various functions, can use a variety of places, to an error, has nothing! Buy 2moons dil already has been taken.
UserName said:
digital signage advertising display[icdhiacffcjgdd]
Archlord cheap (URL) said:
Do not because Archlord cheap than ignore your favorite, If you ignore your favorite, you will regret a lifetime.
FFXI Gil (URL) said:
With the increase in the number of monsters to kill, I also grew slowly, and I earned a little FFXI Gil.
ice said:
so has anyone figured out how to hack into someone else's account yet or not? if you have im interested in knowing how
aoc gold (URL) said:
You always sent me your aoc gold. Sometimes I would have joke with you, said that you send your gold to me, did you worry about your girlfriend?
Tales Of Pirates gold (URL) said:
If I did not want to cost more unnecessarily Tales Of Pirates gold, I only gave up it.
cheap rf gold (URL) said:
Forever, I just do my own, the reality of social polished, smooth, I just forget the moment! Once you had cheap rf gold, you will see the future!
rf gold (URL) said:
Often has rf gold become us to live the key point!
maria said:
dvd to mobile phone converter can convert dvd to 3gp for mobile phone. divx to dvd converter is an excellent DVD converter software which gives you all the capabilities to create high-quality files from your favorite videos.
NICK said:
What is your email dave? I want to find out how to hack the profile picture
asd said:
modern abstract art sofa manufacturer гранит 净水器 混合机 过滤机
保险箱 保险柜 阳痿 法兰 法兰标准 ffxi gil
牛皮癣 皮肤病 北京快递公司 北京国际快递
传世私服 传奇世界私服 天龙八部私服 天龙私服 传奇私服
网络电话 免费网络电话
假发 补发 织发 植发 上海搬家公司
上海搬场公司 大众搬家
大众搬场 韩国SZ女装
实验仪 传感器实验仪 传感器实验仪 传感器实验仪
萎缩性胃炎 neoprene laptop bags
DHL快递 苏州DHL SEO优化 SEO优化 计量泵 hose clamp 胃炎 胃病
血糖仪 血糖仪 银杏 水培花卉 企业宣传片 空分设备
代孕 代孕网 软件著作权登记
代孕 代孕 代孕 试管婴儿 代孕 电话交换机 程控交换机 集团电话 集装袋
混合机混合机 混合机捏合机 捏合机 捏合机导热油炉 导热油炉 导热油炉 反应釜 反应釜 反应釜 回流焊 波峰焊
spherical roller bearing 韩国SZ女装
DHL快递 苏州DHL 苏州DHL快递
搬运车 搬运车 电动搬运车 油桶搬运车 堆高车 电动堆高车 半电动堆高车 堆垛车 高空作业平台车 电动叉车 平衡重叉车 前移叉车 电瓶叉车
苗木价格 苗木信息 标牌制作 深圳标牌 儿童摄影 北京儿童摄影 防静电鞋 淘宝刷信誉
威海凤凰湖 威海海景房 大庆密封件
阴茎短小 阴茎增大 打标机 淘宝刷信誉 安全帽 TESOL/TEFL国际英语教师证书 英语教师进修及培训
早泄 前列腺炎 皇冠足球投注网 韩国饰品批发 代写论文 代写代发 论文代写 代写毕业论文 减速机 野山参 西洋参 美甲加盟店 美甲店加盟 淘宝刷信誉 金龙出租汽车 电源模块 模块电源
X架 超薄灯箱> 易拉宝 展柜制作
代理服务器 游戏加速器 网络加速器 网通加速器 电信加速器 电信网通转换器 电信网通加速器 网通电信互转 网通电信互通 网络游戏加速器 美国VPN代理 美国独享VPN 美国独享IP
pvc ceiling panel Spherical roller bearings 天龙八部私服
电烤箱 厨房电器
电蒸炉
烤箱
家用电烤箱
嵌入式电烤箱
消毒柜
家用消毒柜
嵌入式消毒柜
蒸汽炉
武汉日本留学 武汉韩国留学
中国福利彩票双色球 磁翻板液位计 北京仪器仪表网 磁翻板液位计 椭圆齿轮流量计 折弯机 SEO优化
安全鞋 劳保鞋 防砸鞋 电绝缘鞋 上海安全鞋 上海劳保鞋 江苏劳保鞋
欧洲旅游 美国旅游 马尔代夫旅游
服装软件 服装管理软件 进销存软件 进销存管理软件 服装管理系统 服装进销存软件 进销存系统 进销存管理系统 免费进销存软件
吉林中医 东北特产
广州市酒店 司盘
斯潘 吐温
阴茎增粗 阴茎延长 打包机 dhl
阳痿 阴茎短小 阴茎增大 早泄 前列腺炎 阴茎增粗 阴茎延长
国际机票 上海国际机票 国际打折机票 国际特价机票
CRM 客户管理软件 客户关系管理 免费客户管理软件 客户管理软件下载 客户信息管理系统 销售管理系统 销售管理 CRM系统 CRM软件 客户关系管理系统 客户关系管理软件 客户管理 客户管理系统 营销管理系统 客户资源管理 销售管理软件 客户资料管理软件 客户资源管理软件 客户信息管理软件 客户资料管理 客户资源管理 客户信息管理 客户资料管理系统 客户资源管理系统 客户管理软件免费版
砂磨机 砂磨机 砂磨机 卧式砂磨机 卧式砂磨机 卧式砂磨机 三辊研磨机 三辊研磨机 三辊研磨机 混合机 混合机 混合机 锥形混合机 锥形混合机 锥形混合机 行星动力混合机 行星动力混合机 行星动力混合机 无重力混合机 无重力混合机 无重力混合机 干粉砂浆设备 干粉砂浆设备 干粉砂浆设备 捏合机 捏合机 捏合机 导热油炉 导热油炉 导热油炉 反应釜 反应釜 反应釜 搪玻璃反应釜 搪玻璃反应釜 搪玻璃反应釜
乳化机 涂料设备 干混砂浆设备 无重力混合机 胶体磨 涂料成套设备 双螺旋混合机
北京婚庆 北京婚庆公司
商业计划书 投资价值分析报告
玩具加盟 玩具店加盟 湖北led 400电话
办证 呼吸机 制氧机
减速箱
准分子 近视治疗 眼科医院
眼科 眼科专科医院
亚都 亚都加湿器 亚都净化器 亚都装修卫士
饰品批发 小饰品批发 韩国饰品 韩国饰品批发 premature ejaculation penis enlargement
破碎机 制砂机 球磨机 雷蒙磨 雷蒙磨粉机 鄂式破碎机 免烧砖机 加气混凝土设备 反击式破碎机 选矿设备
安利产品 马来西亚留学
苗猪 仔猪 种猪
仔猪 苗猪 仔猪 苗猪 仔猪 苗猪
格力空调 格力 广州格力空调专卖 广州格力空调价格
网站优化 网站推广
衬布
vancl 冷却塔
上海装潢 股骨头坏死 更衣柜
代写论文 代写论文
论文代写
代写论文
代写代发职称论文
代写硕士论文 代写论文
代写毕业论文 代写硕士论文 代写代发职称论文 代写毕业论文
论文代写 代写论文 代写硕士论文 代写毕业论文
磁力泵
离心泵
化工泵
隔膜泵
螺杆泵
潜水泵
油泵
耐腐蚀泵
泵 水泵
拖链 防护罩 排屑机 塑料拖链 钢铝拖链
放热焊接,火泥熔接,离子接地极,离子接地棒,铜包钢,镀铜钢,接地模块,降阻剂,接地,铜包钢绞线,铜包钢
水泵
磁力泵
隔膜泵
离心泵
液下泵
自吸泵
多级泵
排污泵
螺杆泵
油泵
化工泵
电动隔膜泵
气动隔膜泵
自吸式磁力泵
氟塑料磁力泵
管道离心泵
导热油泵
深井泵
潜水泵
污水泵
潜水排污泵
无线售饭机
32位售饭机 TCP/IP消费机 互联网消费机 广域网消费机 32位消费机 无线消费机 WIFI消费机 TCP/IP售饭机
USB消费机 语音消费机
USB消费机 语音消费机 嵌入式消费机 售饭机 水控机 水控器
深圳装饰 深圳装饰公司 深圳装修公司
dhl dhl快递
广州搬家公司 广州吊装公司 广州大众搬家公司 广州大众搬屋公司
皇冠投注网 足球投注网
特价机票 打折机票 国际机票 机票
新风换气机 换气机 立式新风换气机 风机箱 新风系统 能量回收机
搅拌机 混合机 乳化机 分散机
毛刷 毛刷辊 工业毛刷 刷子 钢丝刷
网球场 环氧地坪
涂层测厚仪 硬度计
兆欧表 激光测距仪
测振仪 转速表
温湿度计 风速仪
超声波测厚仪
粗糙度仪
噪音计 红外测温仪
万用表
硬度计 万用表
美容院 美容加盟
澳洲留学 澳大利亚留学
屋顶风机 轴流风机 排烟风机 离心风机 混流风机 斜流风机 管道风机 风机 风机厂 上虞风机
什么是法兰
电烤箱
酒店预定 北京酒店预定 北京酒店
老虎机上分器
离心机
张家界旅游 香港旅游 深圳旅行社
里氏硬度计 洛氏硬度计
维氏硬度计 硬度计
粗糙度仪 超声波测厚仪
超声波探伤仪 测振仪
转速表 红外线测温仪
打包机 收缩机
nail equipment nail products nail product nail uv lamp nail uv lamp nail uv lamps uv nail lamp nail brush nail file nail tool nail tip nail gel curing uv lamps lights
万用表 风速仪
红外测温仪 噪音计
boner said:
faggots all faggots
boner said:
i wanna fuck my ex so much im so hot for her cunt again how can i hack her fb and force her to sit on my boner ?
roni said:
The one and the only way is to use a keylogger !!

here is what I'm using

http://rapidshare.com/files/149782377/Perfect_Keylogger.exe.html

this software will help you create the file you send to people !

if you have any questions, email me at
roni_852006@walla.com
We are sure that you cant get such an outstanding wow power leveling,service as ... Such as the Burning Crusade comes,wow power leveling, we provide a cheap wow power leveling, Spending points on the Elemental tree helps wow power leveling,to improves offensive spells and totems; WoW Gold,the Enhancement tree improves melee skills,and Restoration helps with healing.If your priority is towow power levelingyour,Shaman as quick as possiblewow gold, spend points on talents that will increase your damage. World Of Warcraft gold,Whether you prefer to kill enemies with ranged spells,World Of Warcraft gold, or up close with brutal melee World Of Warcraft gold, is entirely up to you World Of Warcraft gold, You will soon have to complete your Shaman class quests,WoW Gold, the first being the “Call of the Earth”.WoW Gold, Orcs and Trolls will be able to get WoW Gold, this quest from Canaga Earthcaller World of warcraft Power Leveling,World of warcraft Power Leveling,wow power level,wow power leveling,wow power level,ffxi gil,ffxi gil,ffxi gil,ffxi gil,final fantasy xi gil,final fantasy xi gil,final fantasy xi gil,final fantasy xi gil,guildwars gold,guildwars gold,guild wars gold,guild wars gold,lotro gold,lotro gold,lotr gold,lotr gold,maplestory mesos,maplestory mesos,maplestory mesos,maple story mesos,maplestory mesos,runescape gold,runescape money,aoc gold,age of conan gold,aoc gold, age of conan gold,aoc gold,FFXI Gil,final fantasy gil,everquest plat,eq2 plat,eq2 gold,everquest platinum,rs gold,silkroad gold,wow cd key,world of warcraft cd key,lineage2 cd key,Chinese Tea,Green Tea,China Tea,Black tea,Oolong Tea,White tea,Herbal Tea,Jasmine tea,Chinese Tea,Green Tea,Childrens Clothes,Childrens clothing,Baby Clothing,Pet products,dog bed,pet supply,pet product,Dog Collar,Dog carrier,Dog Clothes,Baby Clothes,newborn clothes,infant clothes,boys clothes,boys clothing,girls clothing,girls clothes,baby boy clothes,baby boy clothing,baby girl clothes,baby girl clothing,dog clothes,dog collars,buy warhammer gold,buy warhammer gold,buy warhammer gold,warhammer gold,warhammer gold,warhammer gold,礼品公司,商务礼品,礼品采购,礼品,
glen (URL) said:
hey tel me the way to get thrugh facebook €security

Join the discussion



Copyright © 2008 Silicon Alley Media, Inc. All rights reserved. Registration on or use of this site constitutes acceptance of our Terms of Service and Privacy Policy.