Showing posts with label facebook. Show all posts
Showing posts with label facebook. Show all posts

Monday, 14 April 2014

Facebook Trolled by Google. Facebook interested Titan Aerospace Purchased By Google

Facebook Trolled by Google.

Google has purchased Titan Aerospace, a maker of drones that Facebook was reportedly interested in buying as well.


“Titan Aerospace and Google share a profound optimism about the potential for technology to improve the world," Google said in a statement provided to Mashable. "It’s still early days, but atmospheric satellites could help bring internet access to millions of people, and help solve other problems, including disaster relief and environmental damage like deforestation. It’s why we’re so excited to welcome Titan Aerospace to the Google family."

Titan's 20-person team will stay in New Mexico and work closely with Google on Project Loon, high-altitude balloons that provide Internet service to areas that currently lack such service. Titan may also work with Makani, a Google project that is developing an airborne wind turbine, according to The Wall Street Journal.

In addition, Titan's drones can collect real-time, high-resolution images of Earth, which may help Google's Maps unit, according to the report.

Thursday, 24 October 2013

What it take to make graph search ? history facebook engieenring

Last week we added the ability to search posts using Graph Search, a feature that has been two years in the making. With one billion new posts added every day, the posts index contains more than one trillion total posts, comprising hundreds of terabytes of data. Indexing these posts and building a system to return real-time results has been a significant engineering challenge—and this is just beginning.

Collecting the Data
One of the biggest challenges we faced in building this product was that Facebook's underlying data schema reflects the needs of a rapidly iterated web service. New features often demand changes to data schemas, and our culture aims to make these changes easy for engineers. However, these variations makes it difficult to sort posts by time, location, and tags as wall posts, photos, and check-ins all store this information differently. We currently have 70 different kinds of data we sort and index on, many of them specific to certain types of posts. In addition, the data is contained in a production MySQL database. This means that harvesting this data puts a significant load on databases that are simultaneously serving production traffic, and the process must be carefully monitored.

Building the Index
We store our harvested data in an HBase cluster, from which we execute Hadoop map-reduce jobs to build our index in a highly parallel process. This index-building process converts the raw data into a search index that works with Unicorn, our search infrastructure. We separate the data into two parts - the document data and the inverted index. The document data for each post contains information that will later be used for ranking results. The inverted index contains what is traditionally considered to be a search index, and building the inverted index requires going through each post and determining which hypothetical search filters match.

Updating the Index
To update the index, we subscribe to changes in the MySQL databases using a technology called Wormhole. Whenever a new post is created, an existing post is modified, a post is deleted, or some connection to a post is edited, we schedule an update on the corresponding post. To avoid code duplication, we run these updates through the same logic mentioned in the "Collecting the Data" section above. However, there is one major distinction: when we originally collect the data, we intentionally bypass our caches, as we want to avoid sending them requests for old data that is likely missing from the cache. When processing an update to the index we hit those caches, as we expect the data to have been recently accessed and be present in the cache.

Serving the Index
The posts index is much larger than other search indexes that Facebook maintains. Before we started working on the ability to search through posts, all Facebook search indexes were served entirely from RAM. This was ideal for quick lookup and was a tenable setup given reasonably small search indexes. However, storing more than 700 terabytes in RAM imposes a large amount of overhead, as it involves maintaining an index that is spread across many racks of machines. The performance cost of having these machines coordinate with each other drove the Unicorn team to look into new solutions for serving the posts index. The solution we decided on involves storing the majority of the index on solid-state flash memory. We managed to preserve performance by carefully separating out the most frequently accessed data structures and placing those in RAM.

Ranking Results
With a trillion posts in the index, most queries return many more results than anyone could ever read.  This leads us to the results ranking step. To surface content that is valuable and relevant to the user, we use two primary techniques: query rewriting and dynamic result scoring. Query rewriting happens before the execution of the query, and involves tacking on optional clauses to search queries that bias the posts we retrieve towards results that we think will be more valuable to the user. Result scoring involves sorting and selecting documents based on a number of ranking "features," each of which is based on the information available in the document data. In total, we currently calculate well over a hundred distinct ranking features that are combined with a ranking model to find the best results. We will continue to work on refining these models as we roll out to more users and listen to feedback.

Project History
Like many other products at Facebook, the ability to search over posts was originally conceived as a Hackathon project. My second day as a Facebook intern coincided with a company-wide Hackathon, and I spent the night aiming to implement a way for my friends and me to find old posts we had written. I quickly discovered that the project was much more challenging than I had first anticipated. However, the engineering culture at Facebook meant that I was supported and encouraged to continue working on it, despite the scope of the project. The majority of the work--infrastructure, ranking, and product--has been accomplished in the past year by a few dozen engineers on the Graph Search team. We are very excited to share the results of our hard work with people using Facebook, and look forward to seeing how people use the new feature and improving it based on their feedback. We hope that being able to search for posts will enable a richer Facebook experience for everyone.

source - facebook engineering

Friday, 14 June 2013

Facebook Introduced Hash tag Features




Hope every one is aware of hash tag (#), that is popularly used to tag the people or page or other item on twitter.
As we all know that Facebook regularly introduce new things for its users, and there was news also going on that Facebook will also roll out the hash tag function, so here is the day came.
Facebook finally adopted the Hashtag function on its site. Hashtags will be both clickable and searchable on Facebook.

This news was officially published on the Facebook official blog post. This will help you to tag other context, page or others post indicating that it is the part of the large discussion. It’s also possible to search for a specific hashtag from the search bar, to click on hashtags that originate on other services
The social network will still let you control the audience of the posts, including those with hashtags.

Wednesday, 13 March 2013

Pakistani Student Rewarded by $500 USD for detecting HTML Injection Vulnerability in Facebook

Haider Mehmood Qureshi, an independent security researcher from Islamabad has been rewarded with $500 for detecting HTML Injection Vulnerability in Facebook. 

According to Haider, Facebook was vulnerable in HTML code, their are some serious Remote HTML injection. Remote User was able to add any brand Name and Radio buttons, hence allowing Remote HTML injection. It was as simple as it sounds. The issue can also cause adding junk/spam entries into the database.



Bug details:

Vulnerability title: HTML Injection
Vendor homepage: http://m.facebook.com
Remote/Local: Remote
Tested on: Windows 7 64 bit Firefox browser (but should have worked on other OS and browsers (not sure about IE))
Vulnerability Submitted on: 12/1/2013
Vulnerability Status: FIXED


Detail: Facebook mobile provides a survey to evaluate the mobile user experience as they surf Facebook mobile site. Here is the survey https://m.facebook.com/survey.php . While entering the mobile phone brands , it provides a list of brands in case you didn't type the correct brand.


The list that was provided contained their HTML code inside the parameter https://m.facebook.com/survey.php?incorrect_brand&params=[HTML code of Brands and Radio Buttons]
Remote User was able to add any brand Name and Radio buttons, hence allowing Remote HTML injection. It was as simple as it sounds. The issue can also cause adding junk/spam entries into the database.



Haider Mehmood Qureshi, BS Computer Sciences Student from Comsats Intitute of information technology Islamabad. Started learning pentesting/hacking in 2009. Initially was into defacing, later realized to make Pentesting/security auditing as my career. His Friends motivated him to go for bug bounties. 
Contact: haidermehmoodqureshi@yahoo.com


Sunday, 17 February 2013

Facebook Confirmed Security Breach on Friday By Java 0day

Facebook Confirmed Security Breach on Friday By Java 0day. Facebook is one of leading social media with more than 1 billion members. According to Facebook blog, "We have found no evidence that Facebook user data was compromised.". Hacker use malware to get excess of Facebook developers systems.
it is also confirmed that Facebook teams up with FBI to probe 'Malware attack'.


According to Facebook Security Notes

"There are a few important points that people on Facebook should understand about this attack:

- Foremost, we have found no evidence that Facebook user data was compromised. 
- We will continue to work with law enforcement and the other organizations and entities affected by this attack. It is in everyone’s interests for our industry to work together to prevent attacks such as these in the future."

Hackers use java zero-day to bypass sandbox to install malware.
According to Facebook "After analyzing the compromised website where the attack originated, we found it was using a "zero-day" (previously unseen) exploit to bypass the Java sandbox (built-in protections) to install the malware. We immediately reported the exploit to Oracle, and they confirmed our findings and provided a patch on February 1, 2013, that addresses this vulnerability."


Oracle Corporation the owner of Java, has since issued a security patch that it says has fixed the problem. In its post, Facebook said it received the Java fix two weeks ago.

Facebook never mentioned the word “hack” in describing the breach. That, no doubt, was by design because hacking is a good thing in Zuckerberg’s vernacular.


One thing prove again that Hackers are no easy to stop. Their is nothing like 100% security. Its just matter of time.

Sunday, 19 August 2012

What you share on Facebook is admissible as evidence


Did you know that what you say on Facebook can be used against you in a court of law? If you're sharing something with your friends, you may as well be sharing directly with the judge and jury: A recent ruling in a U.S. federal court says that if you post something on Facebook, your friend can share that information with the police — it's not a violation of your privacy.



Accused gang member Melvin Colon had argued in court that investigators violated his constitutional right to privacy when they viewed his Facebook profile via one of his friends' accounts. But US District Judge William Pauley III ruled that Colon's messaged threats and posts about violent acts he committed were not private, and indeed fair game for prosecutors. To some extent, the ruling makes logical sense: When you say something publicly on Facebook, you're often sharing a thought with hundreds, maybe even thousands of people. There's not much that's private about that.

Courts have settled a number of questions pertaining to Facebook and our legal system this year. Courts have ruled that it is improper to deliver a court summons via Facebook, even when it's the best method of reaching someone. A court has also ruled that a Like on Facebook isn't constitutionally protected free speech — something Facebook is vigorously appealing.

Monday, 6 August 2012

Hong Kong Alleged Anonymous Hacker Arrested for Facebook Threat


A man believed to be a member of the international hacker group Anonymous was reportedly arrested by Hong Kong police after he claimed on Facebook that he would hack government websites. It is quit interesting that now cyber wings and police are after hacker rather then securing there system.

The police said on Sunday the 21-year-old man was later released on bail, had been held on suspicion of “Access to a computer with criminal or dishonest intent” after he allegedly threatened to hack 7 government websites between June and August this year.


“The Internet is not a virtual world of lawlessness,” a police spokesman said, adding that the man was required to report back to the police in October.

The unidentified man was arrested on Friday before being released on bail.
If found guilty, he would face up to five years in jail.
The man was reported by media to be a member of the global hacker group Anonymous.

The group is said to have 20 members in the semi-autonomous Chinese territory, which guarantees civil liberties not seen on the mainland, including freedom of speech.

The police spokesman declined to confirm his link to Anonymous. The last posting on the “Anonymous HK” Facebook page on July 22 urged authorities to show “respect” to citizens

Sunday, 29 July 2012

Official fb Accounts of Garanti Bankası, Denizbank, Renault Turkey, Ülker, Nokia Turkey, Burger King and Acun.com Hacked

The official Facebook accounts of several companies were hacked on Thursday night by a group of hackers trying to promote the terrorist Kurdistan Workers' Party (PKK).

The pro-PKK hackers changed the Facebook profile pictures of the following companies: Garanti Bankası, Denizbank, Renault Turkey, Ülker, Nokia Turkey, Burger King and Acun.com. They placed the picture of Abdullah Öcalan, the jailed leader of the terrorist PKK organization, on the profiles instead.



The digital marketing agency 41? 29!, which manages the Facebook accounts of these companies, reported on Thursday night that most of the accounts had been restored to their original state.

The head of the agency, Alemşah Öztürk, said on Twitter on Thursday night that they were working to restore the Facebook accounts in cooperation with Facebook, Inc.

The agency also stated on its Facebook account that as soon as it discovered the attack, it notified Facebook, which immediately deactivated the hacked accounts.

Stating that this situation did not constitute a security risk for the followers of the accounts in question, the agency also added that there has been no loss of data from the companies' accounts.


Thursday, 26 July 2012

Facebook offer Bug bounty To hackers, who find flaws in its systems

Several companies already reward 'white hat' hackers who responsibly report flaws in their web services, but Facebook is apparently going a step further with payments to those who find vulnerabilities in their internal systems


Facebook and Google have for some time offered bounties to hackers who find vulnerabilities in their public-facing systems, but now the social network has gone a step further by offering to reward hackers who find and report flaws in Facebook's corporate network.

According to a Bloomberg report on Thursday morning, the move will be announced at the DefCon hacking conference. "If there's a million-dollar bug, we will pay it out," Facebook security response chief Ryan McGeehan was quoted as saying.

The idea of a company paying so-called 'white hat' hackers to probe their sites and report flaws — rather than exploiting them — is rare, but far from new. Google and Facebook do it, as do Mozilla, HP and, as of last month, PayPal.

However, rewarding people for breaking into internal systems is an even riskier proposition. According to the Bloomberg piece, Facebook was moved to introduce the new bounty scheme after an external researcher informed the company of a flaw that meant outsiders could listen in to their internal conversations.

Facebook's bug bounty page says the company will pay a minimum of $500 for each responsible disclosure, as long as the bug could "compromise the integrity of Facebook user data, circumvent the privacy protections of Facebook user data, or enable access to a system within Facebook's infrastructure".

The only kinds of bugs that Facebook won't pay out for are those in third-party apps or websites, denial-of-service vulnerabilities, and spam or social engineering techniques, none of which Facebook has any control over.