Way To Hackintosh : facebook

Facebook Vulnerability Allows Hacker to Delete Any Photo Album

Admin Jixxi 0 facebook, facebook hacking, hacking news, How to hack Facebook (All Methods)

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-r-9J2cRWZKJxaDlIQM8rE5R9KJyrvR8XL9JtxYoJkpjezW7HvR7TvgAiriNQwIqaLfTcpavBp1_sgPL8C2h6OnTA1fFtJvFDVk8osOn5-uiTR3bqrczzvcGgiR6_-TXQw2EU5hJjPiHC/s1600/facebook-friends-ftr.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-r-9J2cRWZKJxaDlIQM8rE5R9KJyrvR8XL9JtxYoJkpjezW7HvR7TvgAiriNQwIqaLfTcpavBp1_sgPL8C2h6OnTA1fFtJvFDVk8osOn5-uiTR3bqrczzvcGgiR6_-TXQw2EU5hJjPiHC/s1600/facebook-friends-ftr.jpg" width="640" /></a></div>
<br />
<br />
<br />
A Serious vulnerability in Facebook has recently been reported that could allow anyone to delete your complete Facebook photo album without having authentication.<br />
<br />
Security Researcher Laxman Muthiyah told<br />
<br />
The Hacker News that the vulnerability actually resides in Facebook Graph API mechanism, which allows "a hacker to delete any photo album on Facebook. Any photo album owned by an user or a page or a group could be deleted."

DELETING FACEBOOK PHOTO ALBUMS<br />
<br />
 According to Facebook developers documentation, its not possible to delete albums using the Graph API, but Indian security researcher has found a way to delete not just his own, but also others Facebook photo albums within few seconds.<br />
<br />
 "I decided to try it with Facebook for mobile access token because we can see delete option for all photo albums in Facebook mobile application isn't it?<br />
<br />
Yeah and also it uses the same Graph API," he said.

In general, Facebook Graph API requires an access token to read or write users data, which gives limited access to an app only.<br />
<br />
However, Laxman discovered that his own "access token" generated for mobile version of Facebook could be exploited to remove any photo albums posted by any Facebook User.<br />
<br />
<b>SAMPLE REQUEST </b><br />
</div>
<div style="text-align: left;">
<span style="color: red;">       Request :-</span></div>
<div style="text-align: left;">
<span style="color: red;"><br /></span>
<span style="color: red;">       DELETE /<Victim's_photo_album_id> HTTP/1.1</span></div>
<div style="text-align: left;">
<span style="color: red;"><br /></span>
<span style="color: red;">       Host : graph.facebook.com </span></div>
<div style="text-align: left;">
<br />
<span style="color: red;">       Content-Length: 245</span><br />
</div>
<div style="text-align: left;">
<span style="color: red;">       access_token=<Your(Attacker)_Facebook_for_Android_Access_Token> </span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
Facebook Bug Bounty program rewarded him with $12,500 USD for helping the Facebook Security team to patch this critical loophole.<br />
<br />
source (www.thehackernews.com)</div>

Facebook Vulnerability Allows Hacker to Delete Any Photo Album

A Serious vulnerability in Facebook has recently been reported that could allow anyone to delete your complete Facebook photo album w...

What it take to make graph search ? history facebook engieenring

Admin Jixxi 0 facebook, news

<div dir="ltr" style="text-align: left;" trbidi="on">
Last week we added the ability to search posts using Graph Search, a 
feature that has been two years in the making. With one billion new 
posts added every day, the posts index contains more than one trillion 
total posts, comprising hundreds of terabytes of data. Indexing these 
posts and building a system to return real-time results has been a 
significant engineering challenge—and this is just beginning.<br />
<br />
<b>Collecting the Data</b><br />
One
 of the biggest challenges we faced in building this product was that 
Facebook's underlying data schema reflects the needs of a rapidly 
iterated web service. New features often demand changes to data schemas,
 and our culture aims to make these changes easy for engineers. However,
 these variations makes it difficult to sort posts by time, location, 
and tags as wall posts, photos, and check-ins all store this information
 differently. We currently have 70 different kinds of data we sort and 
index on, many of them specific to certain types of posts. In addition, 
the data is contained in a production MySQL database. This means that 
harvesting this data puts a significant load on databases that are 
simultaneously serving production traffic, and the process must be 
carefully monitored.<br />
<br />
<b>Building the Index</b><br />
We store our 
harvested data in an HBase cluster, from which we execute Hadoop 
map-reduce jobs to build our index in a highly parallel process. This 
index-building process converts the raw data into a search index that 
works with <a href="https://www.facebook.com/notes/facebook-engineering/under-the-hood-indexing-and-ranking-in-graph-search/10151361720763920">Unicorn</a>,
 our search infrastructure. We separate the data into two parts - the 
document data and the inverted index. The document data for each post 
contains information that will later be used for ranking results. The 
inverted index contains what is traditionally considered to be a search 
index, and building the inverted index requires going through each post 
and determining which hypothetical search filters match.<br />
<br />
<b>Updating the Index</b><br />
To update the index, we subscribe to changes in the MySQL databases using a technology called <a href="https://www.facebook.com/notes/facebook-engineering/wormhole-pubsub-system-moving-data-through-space-and-time/10151504075843920">Wormhole</a>.
 Whenever a new post is created, an existing post is modified, a post is
 deleted, or some connection to a post is edited, we schedule an update 
on the corresponding post. To avoid code duplication, we run these 
updates through the same logic mentioned in the "Collecting the Data" 
section above. However, there is one major distinction: when we 
originally collect the data, we intentionally bypass our caches, as we 
want to avoid sending them requests for old data that is likely missing 
from the cache. When processing an update to the index we hit those 
caches, as we expect the data to have been recently accessed and be 
present in the cache.<br />
<br />
<b>Serving the Index</b><br />
The posts index
 is much larger than other search indexes that Facebook maintains. 
Before we started working on the ability to search through posts, all 
Facebook search indexes were served entirely from RAM. This was ideal 
for quick lookup and was a tenable setup given reasonably small search 
indexes. However, storing more than 700 terabytes in RAM imposes a large
 amount of overhead, as it involves maintaining an index that is spread 
across many racks of machines. The performance cost of having these 
machines coordinate with each other drove the Unicorn team to look into 
new solutions for serving the posts index. The solution we decided on 
involves storing the majority of the index on solid-state flash memory. 
We managed to preserve performance by carefully separating out the most 
frequently accessed data structures and placing those in RAM.<br />
<br />
<b>Ranking Results</b><br />
With
 a trillion posts in the index, most queries return many more results 
than anyone could ever read.  This leads us to the results ranking step.
 To surface content that is valuable and relevant to the user, we use 
two primary techniques: query rewriting and dynamic result scoring. 
Query rewriting happens before the execution of the query, and involves 
tacking on optional clauses to search queries that bias the posts we 
retrieve towards results that we think will be more valuable to the 
user. Result scoring involves sorting and selecting documents based on a
 number of ranking "features," each of which is based on the information
 available in the document data. In total, we currently calculate well 
over a hundred distinct ranking features that are combined with a 
ranking model to find the best results. We will continue to work on 
refining these models as we roll out to more users and listen to 
feedback.<br />
<br />
<b>Project History</b><br />
Like many other products at 
Facebook, the ability to search over posts was originally conceived as a
 Hackathon project. My second day as a Facebook intern coincided with a 
company-wide Hackathon, and I spent the night aiming to implement a way 
for my friends and me to find old posts we had written. I quickly 
discovered that the project was much more challenging than I had first 
anticipated. However, the engineering culture at Facebook meant that I 
was supported and encouraged to continue working on it, despite the 
scope of the project. The majority of the work--infrastructure, ranking,
 and product--has been accomplished in the past year by a few dozen 
engineers on the Graph Search team. We are very excited to share the 
results of our hard work with people using Facebook, and look forward to
 seeing how people use the new feature and improving it based on their 
feedback. We hope that being able to search for posts will enable a 
richer Facebook experience for everyone.<br />
<br />
source - <a href="https://www.facebook.com/Engineering?ref=stream">facebook engineering </a></div>

What it take to make graph search ? history facebook engieenring

Last week we added the ability to search posts using Graph Search, a feature that has been two years in the making. With one billion new ...

Facebook Introduced Hash tag Features

Admin Jixxi 0 facebook, news

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHT5SHzpsRDLJhwORd2Ue_LGfaZh4L54pAEpM0KJY-y6bQ6uFfqDI_nK-5ep3ZexpDbI_d4A9fzInBfqxPWJeuDfIS8W9NoN2FTtq7Ip8cIF4IsI2qnFnSVrglOTba1XeDfT7gqysCCMz2/s1600/Facebook+Introduced+Hash+tag+Features+%28way2h%29.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHT5SHzpsRDLJhwORd2Ue_LGfaZh4L54pAEpM0KJY-y6bQ6uFfqDI_nK-5ep3ZexpDbI_d4A9fzInBfqxPWJeuDfIS8W9NoN2FTtq7Ip8cIF4IsI2qnFnSVrglOTba1XeDfT7gqysCCMz2/s1600/Facebook+Introduced+Hash+tag+Features+%28way2h%29.jpg" /></a></div>
<br />
Hope every one is aware of hash tag (#), that is popularly used to tag the people or page or other item on twitter.<br />
As we all know that Facebook regularly introduce new things for its 
users, and there was news also going on that Facebook will also roll 
out the hash tag function, so here is the day came.<br />
Facebook finally adopted the Hashtag function on its site. Hashtags will be both clickable and searchable on Facebook.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTna4C-KxNTTY0KDHoqbyvBqPYqYHOi8kIHqK291V6YfPF62GAbKEsSVmlxjrW9WysguA07gGUtTHWO4lpJz_KAav7lQc3kSBuJHkDBIQ4qjSh7u2pnMR3CZXfT8-rTTScmBIOJ8i7Gv37/s1600/Facebook-Launches-Searchable-Hashtags+%28way2h%29.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTna4C-KxNTTY0KDHoqbyvBqPYqYHOi8kIHqK291V6YfPF62GAbKEsSVmlxjrW9WysguA07gGUtTHWO4lpJz_KAav7lQc3kSBuJHkDBIQ4qjSh7u2pnMR3CZXfT8-rTTScmBIOJ8i7Gv37/s1600/Facebook-Launches-Searchable-Hashtags+%28way2h%29.png" /></a></div>
<br />
This news was officially published on the Facebook official <a href="http://newsroom.fb.com/News/633/Public-Conversations-on-Facebook">blog post</a>.
 This will help you to tag other context, page or others post indicating
 that it is the part of the large discussion. It’s also possible to 
search for a specific hashtag from the search bar, to click on hashtags 
that originate on other services<br />
The social network will still let you control the audience of the posts, including those with hashtags.<br />
<br /></div>